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What we do 


» We support the open source community 
by providing a resource of information, and 
a forum for debate. 


» We help all readers get more from Linux with our 
tutorials section — we've something for everyone! 


» We license all the source code we print in our 
tutorials section under the GNU GPLv3. 


» We give you the most accurate, unbiased and 
up-to-date information on all things Linux. 


Who we are 


This issue we look at 3D printing and all the 
possibilities it can bring. We ask our experts what 
they would like to 3D print... 








eB a ica ya 
| would print out I'd print a ee ze] 

a 3D replica of my replacement A 3D replica of my 
Oe cmssecmcer-lHe handle for the tea torso, so it would 
as a decoy for all machine that Neil look like the work 
of those pesky broke with his of a Renaissance 


MAS cata (sce 


Hulk-like strength, ee] |e)(e)g 





sone 





Mayank Sharma 


Les Pounder 
I'd print myself 'd print out I'd print out a 3D 
a backup beard replacement acoustic guitar, and 


just in case | lose organs so | could then use a regular 


my real one ina live forever, which 2D printer to print 
freak accident. It would annoy out instructions on 
could happen! 





Shashank. how to play it. 
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I'd 3D print a case | quite fancy I'd print out a giant 
for my Raspberry printing out 3D model of Tux the 


John Lane 


Pi that made it models of Da Vinci's penguin and leave 


look like a robot inventions to see it in Mayank’s front 
from Miyazaki’s how well they would garden (just to 
OTIS, really work. FINO Ate 


David Hayward 
Creating a 3D 
model of myself 
will fit in with my 
Home Alone- 
inspired burglar 
deterrent. 
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Welcome 





An abundance of choice 


The freedom to choose is a key pillar of the open source 
») world; hairy Richard Stallman wanted to ensure that we 


all had the freedom to access ‘computing’, and it’s a 
good thing too. Could you imagine having no other choice than 
Windows 8? What would you do if Apple iOS was the only 
option? If the GNU/Linux system didn’t exist you’d find your 
freedom to choose severely limited. Our main feature this issue 
celebrates that choice by looking at the big five distros: Ubuntu, 
Mint, Fedora, Mageia and OpenSUSE. We are pitting them 
against each other and highlighting their pros and cons so you 
can find out which one is the best for you. They’re all stand-out 
distros in their own ways, but what makes one the right choice 
for your desktop, server or laptop? We know that you will have 
your own opinions, and our scope isn't limited to just those five 
distros, so we take a look at the hardcore and lightweight 
options as well — at Linux Format, we're always excited at the 
host of choices on offer! 

Something that’s not quite so open — but still rather 
empowering — is everyone's favourite diminutive ARM-powered 
board, the Raspberry Pi. Excitingly, it took a step closer to 
becoming a fully open platform when Broadcom - 
manufacturer of the Pi’s SoC — open sourced its GPU stack. 
This is a first for Broadcom and can only be down to the 
fantastic work of the Raspberry Pi Foundation. While many 
parts of the Pi’s Broadcom SoC will remain blobs, this 
additional open sourcing is another step in the right direction. 

Elsewhere, GPL 3D printer models have the ability to 
revolutionise manufacturing and we are therefore taking an 
open source first look at just how you can get involved with 
3D printing. However, if you fancy something a little more 
down-to-earth, you could try out the open source Arduino 
Shrimping.it project on page 78. 

With tutorials on hardened home servers, the Ghost blogging 
platform, coding tutorials on HTML5 and JavaScript workflow, 
this issue we're touching upon the whole range of benefits that 


the FOSS world has to offer! 
ee 
/) g A : 


Neil Mohr Editor 
» neil. mohr@futurenet.com 





See p30 for awesome deals 
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—— 110 per cent of your recommended said amount of penguins. 
Zbox Nano ID68+-.............. 16 
We whacked SteamOS on this tiny PC to see 
how well it would cope as a home-made 
Steam machine. It offers plenty of power in 
a very small package. 
> Asmall PC that comes ready for you 
to install your favourite distro. 
PCO OO osc ce secs getcheetsices 17 
Will the latest Chromebook make enough of Yo 
a positive impression for us to go full . 
Google? Read on to find out... Roundup: oe 
S ) IDEs for 0 eens 
e | = 
coding p24 
$post = t ($comment_post_ID); 
if { empty{ $post-> 
> SparkyLinux combines good looks sstatus_obj = = icilcitiasioa ane sats ciel dese jr aananisie a 
and plenty of power tools. We like. — es 
Synology DS21456.....3:..:., 18 ware eee 1 iE: sachet ; aed | ee ie pw nan ae ie aA 
Make your home network the talk of the miei ae saan iaaibliata: al see ah RYO al 
(extremely geeky) town with the best wrioads/proects/ wordpress yee 
network attached storage device around. oles - e 
Philips Screeneo .........:++- 19 pee | . - 
It's a bit on the expensive side, but this = lane Siieaaaeainaadiidi ; au 
Android-powered projector proves its worth. "Ae Gy ets t ~—e 2 Moran = 8; 1 < MM ASCE OUR, S00) | 
wp-content 8 | ires before a ent is # jtguish . . eae i et Kivi cael 
SparkyLinux ..........00:000 20 sromoawcas ft | fares in Semone post | igus om | 
Just because a distro has a minimalist ‘ 
design doesn’t mean it can’t be powerful. Talking heads | 
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CrunchBang Linux on our Raspberry Pi? 
Don't mind if we do! 


It’s a mindset anda Ng 
way of life you are 

born with — a thirst to 9) 

want to understand. 


Freakyclown on hacking and why it is so important p40 


Nvidia GTX 750 Ti........... 22 


The latest Nvidia tech in a well-priced card. 


Game Ie@VICWS.........2::02 23 
We play Guacamelee! Gold Edition and 
Gone Home. 
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On your free DVD 
Mageia 4 


» Quite possibly the best distro availabl . 


onc i Ubuntu 13.10 


SS OW rice Chick elmira oe yourself or a 
loved one to an LXF 
PLUS: HotPicks and tutorial code e}S, 6 subscription! p30 


3D printing... 


How the latest tech works with Linux. 


CyanogenMod................0... 


What's next for the popular Android mod? 


GnuPG ..........ccccecceeceeeeeeeeee 


We explain the cryptographic software. 
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(@) Coding Academy 





Pe scree cccaueerectd Cote etd neni Fintionind 

Think you can make the next YouTube? Find out Neil Mohr sh aut sins + notificati 
how to host videos online in a customised player age - soe cau ge ie = a 
with HTMLS. from Android devices to the Linux desktop. 
JavaScript Grunt..............08 


Never again suffer from RSI (Repetitive Scripting 
Irritation) thanks to Grunt, which can 
automatically run JavaScript tasks, giving you 
more time to enjoy the finer things in life, such as 
this magazine. 





Complete guide................. 
Carl Fletcher hosts an OpenSUSE 
masterclass, with hints and tips. 





PN sesiaciatciidccisnetnstesins Subscriptions ........... ANSWEFS .......2000cceeeeees 

Upstart vs systemd, Mozilla’s $25 Treat yourself to a subscription to 

smartphone, an Ubuntu phone is LXF. Go on. You deserve it. Copying ISO images to USB, Cron ANd Ab oo. cceicss. 

spotted in the wild and more. recording on Raspberry Pi and more. save time by getting your computer to run 
Sysadmin nice atecsancnpioaat GONE SRY See ay 

Mailserver.................. Dr Chris wonders if Amazon S3 will Next month............... 

Hardware debates, Fedoraloveanda __ keep your data safe even if all life on Get the perfect Linux desktop, Firefox Cet rr 

plea for more penguins. earth is wiped out by ameteor, inone OS explored, and we investigate Make sure your blog stands out from the 
of his more cheerful articles. FOSS in the education sector. crowd with the Ghost platform. 

User groups............ - 

Sunshine, real ale and technology PHOUPICKS ccsvcsewasavcadieres " . : 

make for a fantastic Electromagnetic |The best open source software, Shrimping.it eee hehe ens 0 0ee eee 


Create your own DIY circuit board for 


Field 2014, plus news from the North. forged in the fires of Mount Doom. 
literally pennies. 





ROUNVCUIDD ooo ice cacusanncnnes Back issues. ............... 

We test out five of the best Integrated Missed last issue's contents page? Advanced server .............. 
Development Environments to help It was a classic! Don't worry, though, . -, Build your own server in your own home 
you with your coding, whether you're — grab yourself a back issue and relive Our subscriptions team is using your own devices and your own brain. 
a beginner or a pro. all the fun! waiting for your call. 
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THIS ISSUE: Upstart vs systemd »> Mozilla phones >>) Ubuntu phones >) Wifislax 


SYSTEM PROCESS 


Systemd kills Upstart 





Debian puts its weight behind systemd, and Ubuntu swiftly follows. 


hen a process performs 
W a function as important as 
being the first one the 

kernel of a Linux or Unix computer 
starts when booting up, there is always 
going to be intense debate about what 
should replace it when it gets outdated. 

This is exactly what has happened 
with the init daemon. It’s the first 
process to load, with all other processes 
being its child processes. It plays the 
key role in not only booting a system, 
but making sure filesystems, network 
tools and other services, processes 
and programs are configured and 
running correctly, and then runs until 
the shutdown command is received. 
This is all fine, but it has started to show 
its age, and is generally regarded as 
archaic and needlessly cumbersome, 
due mainly to its scripted nature, 
where the next task can't be performed 
until the one before completes — 
which causes delays. A replacement 
was needed, preferably one that was 





> Canonical’s Mark Shuttleworth. 
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asynchronous. In 2006, Upstart was 
introduced, and for a while it looked as if 
that was going to be the de facto 
replacement for init, being adopted by 
Ubuntu, Fedora, WebOS and Chrome 
OS. Developed by Canonical, its event- 
driven design made it more flexible, 
and its early popularity with a number 
of distros, regardless of their affiliation 
with Canonical, made Upstart’s 
coronation as the successor to init 

all the more likely. 

In 2010 another alternative, 
systemd, was introduced — and that’s 
when things got a little heated, as 
support for Upstart began to shift to 
systemd. Whilst Fedora had adopted 
Upstart with version 9, by version 15 it 
had moved to systernd. Meanwhile, 
Upstart was included with the fourth 
milestone of OpenSUSE 11.3, though as 
an option rather than the default 
replacement for init, yet in version 11.4, 
in March 2011, systernd was used — and 
to add insult to injury, it was even 
enabled by default. 

Whilst Ubuntu looked to be sticking 
with its parent company’s creation, 
Upstart, Debian was taking a more 
cautious approach. Whilst initially 
adding Upstart as an option rather than 
a default, when systemd was released 
Debian began debating a move. Ina 
post on https://wiki.debian.org, the 
benefits of systerd were explained: 
“Systema is not just init. It unifies, in 
fewer lines of code, everything that is 
related to starting services and 
managing session groups: user login, 
cron jobs, network services (inetd), 
virtual TTY management... having a 
single system to handle all of that 
allows us to remove a lot of cruft, and 
to use less memory on the system.” 

Just as things seemed to be moving 
in favour of systemd, Mark Shuttleworth, 


www.linuxformat.com 





Canonical founder, spoke out about 
systemd, and Upstart’s detractors, ina 
post on http:/ /bit.ly/Ixfupstart, 
which began with a passionate defence 
of Canonical’s other controversial 
creation, Mir. “When lots of competitors 
attack a project on purely political 
grounds, you have to wonder what 
THEIR agenda is. At least we know 

now who belongs to the Open Source 
Tea Party... those same outraged 


“All the mainstream 
Linux distros have now 
switched to systemd.” 


individuals have NIH'd just about every 
important piece of the stack they can 
get their hands on... most notably 
systemd, which is hugely invasive and 
hardly justified.” 

The fact that Shuttleworth’s jab at 
systemd occurred during a blog post 
defending Mir — another bone of 
contention between Linux developers — 


shows how high emotions were running. 


Finally, the future of init's successor 
came down to Debian. After a tense 
debate that took three months to 
complete, and included two failed calls 
to vote, and calls for the technical 
committee chairman Bdale Garbee to 
be removed, a vote was held on which 
new init system Debian would adopt. 
The result was a 4-4 tie, with Garbee 
given the casting vote to break the 
deadlock — and he went for systemd. 

With Debian supporting systermnd, an 
increasingly isolated Ubuntu soon 
announced that it would drop Upstart 
and use systemd. All the mainstream 
Linux distros have now switched to 
systemd, and Ubuntu will use it when 
14.10 is released later this year. 
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Mozilla announces 
the $25 smartphone 


A low-end phone out to make it big in developing countries. 


t this year’s Mobile World Congress in 
Spain, as always, there were a lot of 
companies showing off their latest and 


greatest smartphones, cramming the handheld 
devices with more and more features, with an 


increasing asking price to match. 

However, amongst the companies fighting it 
out for the high-end market, Mozilla was turning its 
attention towards a rather different — yet rapidly 





> The small, yet affordable, FirefoxOS phone 
from Haier in action. 


PHONES 


expanding — market. In many parts of the world — 
and especially in developing countries — spending 
the equivilent of a couple of hundred pounds on 

a handset is just not feasible, which is why 
Mozilla's announcement of a deal with Chinese 
chip designer Spreadturn Communications 
(instead of Qualcomm, which had been providing 
the chips for FirefoxOS-based smartphones), has 
garnered so much attention. 

By being able to keep the cost of the phone so 
low, Mozilla is looking to make inroads in markets 
such as India and Indonesia — with Indonesian 
mobile networks such as Telkomsel and Indosat 
planning to sell the devices. 

We were able to get some hands-on time at 
Mobile World Congress with a unit created by 
Haier for the Chinese market. It runs on a SC6821, 
a single-core ARM Cortex A5 SoC running at 1GHZz, 
with 256MB RAM, 2GB flash storage and a 3.5- 
inch display capable of 320 x 240 resolution. It 
even has a 2 megapixel camera. Those 
specifications might not give the iPhone or 
Samsung Galaxy S4 any sleepless nights, but for 
that price we could see FirefoxOS smartphones 
really taking off. 


The first Ubuntu Phones 


Two prototypes shown off in Barcelona. 


this year’s Mobile World Congress, however, 

with Canonical having a strong showing in 
support for the fledgling Ubuntu Phone, showing 
off two prototypes whilst they were at it — the 
Meizu MX3 and the BQ Aquaris. 

Unlike Mozilla's desire to dominate the low-end 
market with an impressively cheap handset, 
Ubuntu Phones -— at least at the moment — will 
target the mid- to high-end smartphone market. 
A risky manoeuvre, perhaps, with Android and 
Apple dominating. 

The Meizu MX3 comes with an eight-core 
Samsung processor, 5.1-inch screen and an 8 
megapixel camera. The sleek and minimalist 
design (it has only one button ) seems rather 
influenced by Apple's aesthetics — it even comes in 
a glossy white body. The Spanish-made BQ 
Aquaris has slightly lower specifications, with 
a 4.5-inch screen and a quad-core Media Tek A7 
chip. It's worth bearing in mind that these are 


| wasn't just Mozilla hogging the limelight at 





prototypes — and neither were working at MWC — 
so the specifications could change when they 
launch. According to Mark Shuttleworth, founder 
of Canonical, we will see the first Ubuntu phones 
go on sale 
later this 
year, some 
time around 
autumn. 
No prices 
have been 
announced 
yet, but you 
can be sure 
they will be 
going for a 
bit more 
than $25. 


>) The MX3: if Apple and Samsung had a baby... it 
would come with Ubuntu Touch installed. 
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It's been a turbulent few 

» months for Bitcoin. On the last 
day of February, www.mtgox.com, 
the world's largest Bitcoin 
exchange, filed for bankruptcy. 
During the crisis, the company lost 
750,000 bitcoins (worth around 
$446 million) of customer holdings. 
The company itself lost 100,000 
bitcoins that it owned, bringing the 
total loss to more the $500 million. 

Mt.Gox laid the blame for this on 
a software bug that caused 
incomplete Bitcoin transfers, which 
might then have been exploited by 
hackers. However, it didn't take long 
for the currency to recover, with the 
price of one bitcoin climbing to 
a high of $701.32 just a few days 
after Mt.Gox’s bankruptcy — a gain 
of 57 per cent over the past week. 
It was also announced that the 
UK is planning to scrap VAT on 
Bitcoin trades. 





> After a major setback, Bitcoin is 
proving to be somewhat resilient. 


Figures from Gartner show 
» (http://gtnr.it/InfXbZR) 
Android has taken a 62 per cent of 
the worldwide tablet market, with 
an increase in sales of 68 per cent. 
Two years ago, sales of Android 
devices trailed iOS by 8 million — 
now Android devices have a lead of 
50 million. Meanwhile, iOS devices 
account for 36 per cent of the 
market — down from 52.8 per cent. 
Windows tablets, for the record, 
now account for 2.1 per cent. 


Whilst Android goes from 
» strength to strength, 64-bit 
Android devices are a conspicuous 
absence. The current version of 
Android, 4.4 (KitKat), is only 32-bit 
as people wait for Google to release 
a 64-bit version. A Linux group, 
www.linaro.org, is looking to speed 
up the process by creating apps for 
64-bit Android running on ARMv8& 
architecture, as well as contributing 
to the Linux kernel. 
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Comment 





This month, 

the UK 

Cabinet Office 

published 
proposals on Government 
documents and went 
through a public comment process. They 
mandate all the sensible and obvious things: 
exposing data as standard HTML, CSV, etc. 
More interestingly, though: “For information 
being collaborated on between departments... 
information should be shared in ODF (version 
1.1 or higher eg ODF 1.2).” 

That is a great commitment to openness that 
may help to drive extremely positive changes. 
Thankfully, the Cabinet Office proposal doesn't 
fall for including OOXML. Instead, it enables real 
choice of implementation by excluding OOXML 
from the list of acceptable formats, and by 
focusing on a real open standard: the Open 
Document Format (ODF). 

Having been involved in the OOXML process 
at ECMA, alongside Microsoft, it’s clear that 
OOXML is a silhouette of every feature and 
corner-case of a single vendor's complex 
implementation, with much of that complexity 
carried through to ISO. It was good of Microsoft 
to engage and fully explain its format. However, 
it's only usefulness as a standard seems to be 
to help people mandate the single high-fidelity 
implementation (via a different name). 

In contrast, the ODF standardisation process 
is something that all implementors can get 
involved with, can contribute meaningful 
changes and improvements to, and can work 
collaboratively on. ODF has diverse, high- 
fidelity implementations available from many 
companies to bring real competition to the 
market for office suites. Interestingly, others 
who claimed to have ‘implemented’ OOXML in 
the consultation seemed to have managed only 
to do some banal XML output. 

By choosing ODF, the UK can enjoy the 
benefits of ODF implementations. Never again 
should citizens have to pay for software to read 
their own Government's data. 


> Michael is a pseudo-engineer, semi-colon lover, 
SUSE LibreOffice hacker and amateur pundit. 
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What’s behind the free software sofa? 


LINUX DISTRIBUTION 


The latest version of Wifislax has 
just been released. Running off a 
live CD, this Slackware-based distro 
comes with a number of tools for 
wireless networks, with a particular 
emphasis on security. Version 4.8 
is built from packages from 
Slackware 14.1 and includes 

a number of improvements, 
including an upgrade to the Linux 
kernel to provide better wireless 
auditing and a number of bug fixes. 
Aimed at a niche group, it comes 
with two desktops — KDE 4.10.5 


VIRTUAL COMPUTING 


The 4.3.8 version of VirtualBox has 
been released. The first of 2014, 
this is a maintenance release that 
comes with a number of 
improvements for running the 
virtualisation software on Linux, 
including support for Enterprise 
Linux 6.5 kernels, as well as 
improved 3D graphics handling 
and an easier to use GUI. 
VirtualBox lets you create and run 
virtualised machines running 
within Linux. It’s handy if you want 
to test a number of distros or 


SOUND SERVER 


PulseAudio 5.0 will be available by 
the time you read this. It’s an open 
source networked sound server 
hosted by freedesktop.org. 
Features include volume controls 
for each application you have 
running, the ability to play sounds 









and Xfce 4.10 — and you are able to 
add on modules to make the distro 
more flexible: www.wifislax.com 


TTT 


Slackware Based System . 


aa 


> For security and forensic tasks, 
Wifislax is worth a try. 


operating systems, or even sandbox 
applications — you can run them 
without affecting your main PC. 





 rasie e Sepa 


>) Use VirtualBox to run Windows XP 
within Linux — if that’s your thing. 


through a remote computer's 
speakers via a network, low-latency 
recording and support for multiple 
audio sources. 

The latest release brings BlueZ 5 
Support and native log target support 
for system-journal. 


CORRECTION FOR LINUX FORMAT 181 


We're merely human here at Linux 
Format and occasionally mistakes 
do make it through the rigorous 
checking process. An eagle-eyed 
reader spotted a wiring mistake on 
page 39 of the Master the 
Raspberry Pi feature in LXF181. 
The correct wiring diagram is 
printed opposite, but thankfully the 
original wasn't damaging in any 
way, just not very functional. Les 


_ wwwilinuxformat.com 





Pounder is currently resident in the 
Linux Format Tower's Dungeon of 
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prints a mistake 
shocker. 
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Mailserve 


Write to us at Linux Format, Future Publishing, 30 Monmouth Street, Bath BAl 2BW or Ixf.letters@futurenet.com 


») Hardware hell 


Good evening. | found the letter 
‘Sound as a pound’ by Nick Ford 
and your response to be very 
interesting. My old PC has 

a Sound Blaster Audigy sound 
card. | have Ubuntu 9.04, 
10.04LTS and 12.04LTS (all 
32-bit) installed alongside 
Windows XP. The sound card 
works fine in all of my Ubuntu 
versions. | have Clementine, 
Audacity, VLC, Banshee, 
Rhythmbox installed in 10.04 
and 12.04 and the sound works 
fine with them. 

In my new PC | have a Sound 
Blaster X-Fi Titanium sound card 
installed. It works fine in Ubuntu 
12.04, Linux Mint 15 and Zorin 
6.4 (all 64-bit). | dual boot with 
Windows 7 Ultimate 64-bit. From 
your response to Nick’s letter 
| guess | am lucky that the 
sound card works. 

Following your comment 
about hardware manufacturers, 
| had an issue with the Intel 
graphics on my motherboard. 

In Ubuntu the highest resolution 
| could get was 1,024x768, yet 
in Windows 7 | had resolutions 
up to 1,620x1,440. | eventually 
bought a Nvidia graphics card 
and found that my old monitor 
did not switch on when 
connected to it, so | ended 

up having to buy a new one. 
Philip Gray 

Matt says: Ah yes, that’s the old 
hardware compatibility 





10 | LXF183 May 2014 





Jan, Calgary, Canada 


Matt says: Jan, I'm of the school of thought 
that there can never be enough Tux in the 
magazine, so | will endeavour to keep the PPP 
over an acceptable threshold. I’ve hidden a few 
penguins throughout the letters page, so | hope 
you and your daughter enjoy looking for them! 


conundrum. Where it giveth with 
one hand (your Sound Blaster 
compatibility) it taketh with the 
other (no integrated Intel graphics 
for you). It’s a tale almost as old 
as time, and in some ways you're 
not being too far fetched when 
you say that the lack of Sound 
Blaster woes is due to luck — and 
the same can be said about your 
Intel problems. Another person 
with a similar setup may suffer 
from the reverse, or alternatively, 
they may not encounter any 


problems at all. It’s hard to predict. 


: OR Letter of the month 


te ' ' here’s Tux? 


y 19-month-old daughter 
sometimes reads Linux Format 
with me. She started on LXF179, 
which had over half a dozen 
penguins on the first dozen pages (and well 
over a dozen scattered throughout). 

Unfortunately, LXF180 barely has four in 
the entire magazine. Keep the PPP (penguins 
per page) up, or | won’t be able to keep 
reading the magazine with her! 


One of the major strengths of 
PCs is that they can run a huge 
variety of hardware and software. 
Once you've thrown the extensive 
range of operating systems and 
distributions into the mix, it’s not 
Surprising that there will be 
conflicts and incompatibilities. 
The good news is that with 
a combination of newer hardware 
and mainstream distros, these 
problems should become less 
commonplace. With older 
hardware and more obscure 
distros, you should be able to get 


HUH? You're \ 
NOT 21 YEARS | 


OLD? 





www.linuxformat.com 


> Everyone loves Tux, unless they suffer 
from spheniscidaeaphobia. 












round a lot of problems with a bit 
of research, a splodge of elbow 
grease and plenty of time. 


» A tip of the hat 


| have long wanted to write in 
and say just how much | enjoy 
your magazine each month. In 
fact, | was even up before the 
family on New Year’s Day to read 
the February edition! 

However, having read your 
review of Fedora 20, | feel that 
| should write to you to put in 
a good word for it. As with most 


IT'S NOT MY AGE. IT'S How 
MANY DISTROS I'VE LOADED 
So FAR, TAYING To FIND 

THE PERFECT ONE FoR ME 
= 

















> Mark defends Fedora from the slings and arrows of Linux Format. 


of your Fedora reviews, version 
20 received a distinctly 
mediocre report, and even 
included a picture caption 
stating ‘Not a DOA Fedora 
release for a change’ 

My experience with Fedora 
is always so much better than 
your reviews suggest. Sure, there 
are occasional release bugs, but 
these are usually fixed in 
updates extremely quickly within 
the first week of the version 
being introduced. Fedora gets 
me all the latest desktops; not 
just Gnome and KDE, but Mate 
(latest), Cinnamon (latest) and 
Enlightenment (brand new 0.18 
release). The desktops all work 
side-by-side without any 
clashing, and are much better 
than with Ubuntu. 

If | wanted to, | could choose 
a new desktop each day of the 
week from my login window. 
| have nine distros on my test 
machine but none of them boots 


\'M GOING To PRINT 
THIS Tod TUX... 


or turns off as quickly as Fedora. 
Therefore, | find myself using 
Fedora ahead of Ubuntu and 
Mint for both work and play. 
While a vanilla Fedora install 
requires a lot more software 
to compete with Macs or 
Windows, these days 
customizing Fedora is a fairly 
trivial task. There are excellent 
websites, such as 
www.howtoforge.com/the- 
perfect-desktop-fedora-18-xfce 
to help. Once your Fedora setup 
is all singing and dancing, FedUp 
can make it easy to upgrade 
between versions without 
installing all the extras and 
desktops again. Finally, the real 
beauty of Fedora is that it gets 
cutting edge software working 
better than in any other distro. 
The software in Fedora is 
usually brand new and the 
quality of the lesser known (non- 
core) packages seems so much 
better than in Ubuntu (and 


IT'LL PRINT \ 
ON THAT 





therefore Mint). Moreover, when 
| report a bug in Fedora, the 
reporting back on fixing is really 
good. In Ubuntu, | have the 
feeling that people are less 
interested in both the other 
desktops and the non-core 
software. Linux Format, please 
show a little love for Fedora. 

How about an article on how 
to customize Fedora and install 
all those extras that make 
it so lovable? 

Mark Wilson, Durham 

Matt says: First of all, thanks for 
the kind words, Mark. Please don’t 
feel the need to stay your hand 
again if you want to pen us 
another compliment. 

As for the rest of your letter, 
have we been too harsh on Fedora 
in the past? It certainly has its fans 
on the team. Although as we 
mentioned in our review of Fedora 
20 (LXF180), it was a perfectly 
good release, but did little to wow 
us. A 7/10 score is in no means 
bad, especially considering that 
5/10 is a mediocre score, and 
anything below is poor. As you Say, 
Fedora benefits hugely from 
tinkering and with a bit of time you 
can get Fedora running just the 
way you want it to. This issue, 
we've pitted Fedora against the 
other most popular distros to see 
which one comes out on top. We 
can almost hear you cheering on 
Fedora from here. If anyone else 
feels we've been too harsh on 
their favourite distro, why not 
write in and let us know what you 
love about it? 


») Balancing act 

| was rather annoyed by the 
letter from Steve — published in 
LXF180 - and very concerned at 
your reply. If Linux Format is to 
turn into Linux for Beginners 


WE JUST NEED \ — 
To ALLOW A 

LITTLE TIME =—sos#swR 
FoR PRINTING / » 


Mailserver 


| will most certainly be cancelling 
my subscription. 

Surely it is the role of 
a magazine such as yours to give 
the news and explain and inform 
of new developments in the field, 
not teach the subject? There 
must be few yachting 
magazines, for instance, that 
explain exactly how to put 
a dinghy into the water. 

Steve and others like him 
would have been better advised 
to get one or two of the excellent 
books published by O'Reilly. 
While they may not describe the 
latest Ubuntu version, they 
would give the Linux newcomer 
a much greater depth of 
understanding. | wonder how 
many Windows users picked 
up their knowledge of it without 
attending a course or borrowing 
a book from their local library? 
| had been hoping that the 
magazine would be offering 
some useful information on 
Systemd, or perhaps giving us 
more detailed knowledge on any 
changes expected in the next 
version of the kernel, but 
perhaps | am now reading the 
wrong magazine? 

Graham Young 


»)) Live and learn 


I’m writing in response to 
Steve’s email about LXF making 
sure it has content that 
is accessible to noobs. | think 
that’s important, but hasten 
to add that the current content 
combo is something not to be 
messed with, at least not much. 
|, too, was a noob — and still am 
in some respects — but | still 
learned from LXF. When | finally 
decided to take the plunge into 
the Linux operating system, 
| subscribed to as many Linux 
magazines as | could find and 
read them all cover to cover, 
word for word. | understood 
almost nothing, but | just kept 
reading. Little by little, | learned, 
| played, | made mistakes. | even 
started a little game with myself 
where | tried to find command 
or parameter typos in the 
articles. It was fun, and still is. 
Please keep up the good 
work and don’t go too far into 
the noob zone. 
James Baker, USA 
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SPECIAL COLLECTOR'S EMITION — DON'T KAISS IT 


ROLL THE CREDITS 


pee eB eR ea eB eB et eo 
Ree sce Bee ee Bona 2 


THE SHOWS MUST GO ON 


Bie Me eae er se aa mL 


111341303 


POSITIVE IMAGE 
ARABESQUE 
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> The magazine for people who 
wished they had an Amiga. 


Neil says: To quote myself, 
as they are the best quotes, 
“it is a tricky balancing act”. 
And to quote John Lydgate, “you 
can't please all of the people all 
of the time’. It’s good to see that 
things haven't changed much 
from the 15th century. 

| tend to see the magazine 
as a graduated tome, ideally with 
something for everyone. We do 
need to stay approachable for new 
readers and the main cover 
feature will always reflect that, but 
| hope the magazine still brings 
new ideas, tricks and technologies 
to long-standing readers. 

Let us know if we're managing 
that. Outside of that though, the 
tutorials and the non-novice 
coding articles should push you 
and open up new areas of 
knowledge. As it happens, | do 
have a Systemd feature pencilled 
in for issue 184, so hopefully we're 
still on your wavelength, Graham. 


School of code 


| just finished reading the article 
from Linux Format in which 
Robert ‘rOml’ Lefkowitz was 
interviewed. It inspired me to 
reply in this fashion. 
[digression]| was trained as 
an electrical engineer at Purdue 
University in the late 1970s, 
where | was first formally taught 
programming using FORTRAN 
IV, then assembly language for 
the Intel 8080 processor. In the 
1980s, | learned BASIC 
programming language of 
various flavours, 
6800/6502/6809 assembly 
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languages, Pascal, FORTH, C, 
and assorted application 
languages.[/digression] 

In my experience, the major 
reason an educated, computer- 
literate person needs to know 
programming fundamentals 
is to customise a program 
to environment variables — such 
as the machine or the tools — or 
to user requirements. 

In a changing environment, 
the number of machines can 
change, the program might need 
to be executed on different 
computers, other machines 
might need to be connected, 
data queries could alter, the 
software specifications may 
become outdated and there 
might be legal requirements to 
consider. It would seem that the 
requirement for software 
maintenance often exceeds the 
need for ‘new’ flashy application 
software. Being able to adapt to 
the changes is of higher priority 
than marketing a new idea. 

You must be able to grow and 
adapt, or you will die. This is the 
lesson of Charles Darwin, and 
it applies to software as well. 
Carl Snyder 
Matt says: Carl, you bring up 
some interesting points. Say, for 
example, a small business 
employs five people who all rely 
on a specific piece of software 
to do their job. After five years, the 
business’ needs change and the 
software doesn't quite fit the bill 
any more. What's the quickest and 
cheapest way to solve this? Would 
it be better to replace the software 
with something that will achieve 
the business’ goals, but with the 
additional cost, plus time taken 
to train the employees to use the 
new software? Or, if one of the 
team knew how to code, would 
it be preferable to add the desired 
functionality to the existing 
software, therefore keeping costs 
down and reducing the need 
for retraining? We know which 
option we'd pick. 


») Format fan 

It’s great to be back with 
another Format magazine. Back 
in the day, | used to be a 
subscriber to ST Format until it 
finally came to an end in 1996. 
Subscribing to Linux Format 
feels like coming home, with 





such a great level of writing and 
humour. I’d forgotten how much 
| missed those amusing 
screenshot captions! 

Despite being an absolute 
novice with Linux, there is 
so much great content in the 
magazine. | read it virtually cover 
to cover when | can and | am 
currently learning all manner 
of programming languages. 
| particularly like the Coding 
Academy and Tutorial pages. 

The Perfect Linux Install 
article inspired me to finally give 
installing a Linux distro on 
a desktop PC a go. | managed 
to shrink a partition of my hard 
disk to free up space for Linux. 
After searching on the internet, 
| also successfully disabled 
FastStartup and Secure Boot. 

Having a few back issues 
worth of DVDs, | tried 
OpenSUSE, Mint and Mageia, 
because | didn’t like the feel 
of Ubuntu. Unfortunately, | just 
could not get past the next 
hurdle of installing one of them 
without fear of wiping the rest 
of my hard disk. 

| could not seem to get any 
of the distros to point the 
installation to the fresh 50GB 
of space. | was unable to see the 
50GB partition, or in the case of 
OpenSUSE, the installer was not 
content with having that 50GB 
space | had selected — it wanted 
me to select some other part of 
the hard disk afterwards, too. 

| think that many wishing 
to try Linux for the first time 
would want to dual boot, as 
they would still need access 
to a familiar system until 
they have made a 
complete transition. 

| also have some 
paid-for software 
that’s not available 
on Linux that | am 
not about to get rid of ina 
hurry. For a feature that should 
have been aimed squarely at 
absolute Linux beginners, | 
found the barrier was just set 
too high for me and there was 
just too much assumed 
knowledge required. | doubt that 
the article was much use to the 
long-standing Linux Format 
readers either, as they are 
already savvy enough to carry 
out their own installations. 


www.linuxformat.com 



















Perhaps you could put an 
installation category on your 
forums while considering 
essential beginners. It could 
include the essential details on 
how to set up distros on your PC 
with dual booting in mind. 
Stuart Bowes 
Matt says: Stuart, as | was an 
avid reader of Amiga Format, |'m 
afraid you are my sworn enemy. 
Still, time heals all wounds, so let’s 
put aside petty arguments over 
who had the best sound (Amiga), 
who had the superior version of 
Shadow of the Beast (Amiga) or 
who went a more authentic colour 
of urine yellow when left in the sun 
(Amiga). I’m glad you feel that the 
Spirit of those esteemed Format 
magazines of old is evident in the 
one you currently hold in your 
hands. As for your installation 
woes, I'm sorry to hear you are 
having problems — watch out for 
an article from the final editor of 
ST Format in a future issue on this 
Subject. Creating and using 
partitions can be fiddly, and some 
installation processes don't really 
help things. 

Quite a few distros — including 
Ubuntu, which otherwise didn't 
impress you — offer an automated 
process of creating a new 
installation that can be dual 
booted. Of course, partitioning 
and organising drives is 
important, so when you can do it 
yourself, it’s usually for the best. 
We've got a series of 
tutorials coming up that 
| look at some of the core 
1 commands and tools of 
. Linux, including file 
_ systems, partitioning 
and more, so 
1 hopefully they'll 
F help you dual boot 
__ to your heart's 
content. 


Do you have a burning Linux- 
related issue you want to 
discuss? Do you simply want to 
reignite the Atari ST vs Amiga 
wars, or want to request more 
penguins in the magazine? Write 
to us at Linux Format, Future 
Publishing, 30 Monmouth Street, 
Bath BA1 2BW, or email us at: 
ixf.letters@futurenet.com. 
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Linux user groups 


The intrepid Les Pounder brings you the latest community and LUG news. 


EMF Camp 2014 


Les Pounder finds an attractive outdoor event. 


» Blackpool LUG & Makerspace Meets 
every Saturday from 10 am to 2 pm. Visit the website 
to find out more. www.pcrecycler.eu 


» Bristol and Bath LUG Meet on the 4th 
Saturday of each month at the Knights Templar (near 
Temple Meads Station) from 12.30 pm. 
www.bristol.lug.org.uk 

») Edinburgh LUG Meet on the first Thursday of 
the month at the Southsider pub, West Richmond St, 
Edinburgh. http:/ /www.edlug.org.uk 

»)» Greater London LUG 

Extra information can be found on www.gilug.org.uk 
») Hull LUG First Tuesday every month, visit the 
website for more details. http://hulllug.org 

») Liverpool LUG Meet on the first Wednesday of 
the month from 7pm at the Liverpool Social Centre on 
Bold Street, Liverpool. http:/ /liv.lug.org.uk/wiki 

») Lincoln LUG Third Wednesday of the month at 
7pm, Lincoln Bowl, Washingborough Road, LN4 1EF 
http://lincoln.lug.org.uk 

»» Manchester Hackspace Open night every 
Wednesday. Visit the website for more details. 
http://hacman.org.uk 

» Surrey & Hampshire Hackspace Meets 
every Thursday. Visit the website for more information. 
http:/ /sh-hackspace.org.uk 

»» Tyneside LUG First Saturday of the month from 
7pm at the Discovery Museum. Visit the website for 
more details. www.tyneside.lug.org.uk 





beautiful sunny day in August 
with real ale flowing. What else 
do you need in life? Well, aside 


from lots of cool people and technology. 


The Electromagnetic Field, abbreviated 
to EMF Camp, is a weekend outdoor 
technology festival that happens in a 
vast campsite south of Milton Keynes. 

The mix of technology, hacking and 
science is the ultimate draw for many 
as where else can you learn about bio- 
hacking, crocheting, lock picking and 
other great topics? 

The whole weekend is a chance to 
learn and share skills in a constructive 
and supportive environment and at the 
last event, which took place in 2012, we 
found many large tents full of great 
project ideas — although 
everyone tends to 
remember the portaloo 
server racks that were 
scattered around the site. 

Last time, the event 
team also did an astounding 
job of facilitating your every 
need, providing a 380Mbps 
internet connection, which 
was split across the site. 

To help co-ordinate the 


Big tents and even bigger ideas are the name of 
whole event the team ranan the game at EMF Camp. 


FM radio station broadcasting music 
and information, which as well as being 
a good solution to an age-old problem, 
gave the event a more communal feel. 

This year the event takes place 
between 29 to 31 August For more 
details head over to the website to stay 
up to date and register your interest: 
https://www.emfcamp.org. 

The team is also looking for 
volunteers to help make the 2014 event 
a smash success. Volunteers receive 
extra perks and privileges, but most 
importantly you'll receive the warm 
glow of giving something back to the 
community. It’s not all about code and 
commits. Soft skills and a level head are 
also key skills in our community. 





Scottish Ruby Conf 

Ruby has gathered considerable 
momentum in recent years. The 
mix of ease of use and 
exceptionally readable code 
makes Ruby a great language to 
work with. The Scottish Ruby 
Conf on 12 &13 May is your 
chance to learn more about this 
great language and take part in 
some talks and workshops 
covering the broad scope of 
Ruby related content. Tickets are 
£240 (inc VAT) . More detail here: 
http://bit.ly/ScotRubyContf. 


Birmingham Raspberry Jam 
Raspberry Jams are monthly 
meetings for those enslaved by 
the mighty Pi and all the great 
projects they are compelled to 
create with it. We recently 
chatted to Jack Wearden, who is 
the organiser of the Birmingham 
event. Wearden advised us that 
this event has currently been put 
on a forced hiatus due to a 
problem finding suitable space. If 
you run or work for a tech savvy 
business in the Birmingham area 
then please get in contact with 


him, he’s @JackWeirdy on 
Twitter. It would great to get this 
fantastic gathering back on its 
feet again. 


DotYork 

Web development is now an 
intense art form with critics and 
pitfalls at every turn. But what if 
you could hear from experienced 
developers and learn from all 
their mistakes? Well, DotYork is 
the event for you. DotYork brings 
you a selection of great speakers 
who will share their Successes 


www.tuxradar.com 





DotYork: a web conference for 
those with a curious mind. 


and failures with you. They will 
also advise you on the lessons 
they learnt along the way. The 
event takes place in the glorious 
city of York on Ist May. Tickets 
are £/5 for this interesting and 
informative event and you can 
find out more via its official 
website http://dotyork.com. 
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Two Sides is an industry initiative to 
promote the responsible use of print 
and paper as a uniquely powerful and 
natural communications medium. 


me 











Did you know that forests in 
Europe, which provide wood for 
making into paper and many 
other widely used materials, are 
30% larger than in 1950? In fact 
they’re increasing by 1.5 million 
football pitches every year.t 


Magazines are printed on paper 
from natural and renewable wood 
which is all good to know if you love 
reading your favourite magazine. 


tWorld Forest Resources, 1953 and UN FAO 
Global Forest Resources Assessment, 2010 


Des 


ree 





Print and Paper. 
The environmental 
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watched 40,000 
people try to play one 
game of Pokemon at 
the same time. 








ne of the most important 

foundations of the Free and 

Open Source Software 
movement is the belief that people 
should have access to software tools 
no matter what their background, or 
how wealthy (or poor) they are. 
A child whose parents cannot afford 
a Windows and Office licence 
shouldn't be held back from their 
homework, nor should a student 
who can’t afford a Mac and 
Photoshop be stopped from 
completing their course. Thanks to 
a committed community, there are 
free and open source alternatives. 

But what about hardware? In an 
ideal world, there would be free 
(in the financial sense) hardware 
alternatives to expensive devices 
that many of us who live in affluent 
parts of the world take for granted. 
The reality of manufacturing costs of | 
creating hardware means producing 
hardware for free, no matter how 
noble, isn't particularly viable. 
However, producing low-cost 

hardware that lowers the price of 
entry is a completely viable option, 
and it’s one that is becoming ever 
more popular. The Raspberry Pi has 
found great success in providing an 
affordable PC for people to use and 
experiment on, and Mozilla is 
readying a $25 Firefox OS 
smartphone aimed at developing 
countries. There's an ever-growing 
consensus that access to the 
internet is a basic human right, and 
any technology that helps safeguard 
education, freedom of speech and 
other rights should also be made as 
widely available as possible, with 
FOSS being just the beginning. 
matthew.hanson@futurenet.com 


Zbox Nano ID68+ ... 
We try out this compact PC that’s 


small enough to hold in one hand, 
yet powerful enough to play games 
and run most programs. 


PO soc vncccccse ess 


Is this the Chromebook that’s going 
to make us ditch our tablets and 
laptops and embrace Chrome OS? 


Synology DS214se.. 
Easily one of the best NAS drives 
around, and all powered by our old 
friend Linux. 


Philips Screeneo..... 

A feature-packed, Android-powered 
projector that can throw large 
images in a small space. We like it. 


SparkyLinux 


jie 
| ther 





A light and fast Linux distro for those of us 
who want the latest updates and innovations. 
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Aptana Studio 


SparkyLinux .......... 
The minimalist distro aimed at 
power users gets a thorough going 
over in our test lab. 


PiBang Linux.......... 
Get CrunchBang Linux on your 
Raspberry Pi with this handy 
Raspbian alternative. 


Nvidia GTX 750 Ti.. 


An affordable graphics card 


featuring Nvidia's latest technology. 


Game reviews......... 


This month we look at Guacamelee! 


Gold Edition, a colourful old-school 
platformer based on Mexican 
folklore, and Gone Home, a truly 
unique experience. 
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Acer C720: the next 
generation of Chromebooks. 


Guacamelee! || 





Guacamelee: vibrant, humorous and, most 
importantly, a lot of fun. 


perennial 
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Get your code on with this 
roundup of the best IDEs 
(integrated development 
environments) for Linux. 
Whether you're a beginner or 





a pro, these tools can help. 


May 2014 LXF183 | 15 





Reviews 


Zbox Nano ID68 Plus 











Matthew Hanson tries out this compact PC you can stash behind your TV. 


In brief... 


»> Acompact 
machine that’s 
upgradable up to 
a point and does 
not come with an 
OS pre-installed. 











» Intel Core 
i5-4200U @ 
1.6GHz 


» Intel HD 
Graphics 4400 


») 4GB DDR3 RAM 
»» 500GB HDD 


» 10/100/1000 
Ethernet port 

»> 802.1lac Wi-Fi 
» HDMI, 
DisplayPort 


»> 2x USB 2.0, 
4x USB 3.0 


egular readers will recall a few 
R months ago we reviewed the 

Penguin Wee [ Reviews, p16 
LXF181]— acompact PC that packed a 
powerful components into a tiny body. 
The Zotac Zbox Nano ID68 Plus is a 
similarly small-form PC — in fact it’s 
quite a bit smaller than the Wee. 

But while the Zotac ZBOX Nano 
ID68 Plus comes with some decent 
components that will easily run the 
distro of your choice, along with office 
and media software, as well as the odd 
game, its specs still pale in comparison 
with the impressive Penguin Wee. 

For a start, the Zotac ZBOX Nano 
ID68 Plus comes with a dual core Intel 
Core i5 4200U running at 1.6GHz, 

a perfectly good and relatively recent 
fourth generation processor (which 
you'll hear referred to as Haswell). 

The Wee model we reviewed, 
however, came with a quad-core Intel 


Core 15-4430 — a full desktop processor. 


Not only is it clocked higher (3GHz), but 
the additional cores make it much 
better at multitasking, among other 
improvements. The Zbox’s integrated 
graphics is the Intel HD Graphics 4400, 
which is perfectly adequate for casual 
games and watching HD media, though 
not as good as the Penguin Wee's Intel 
HD Graphics 4600. 

Rather helpfully, certain parts of the 
Zbox Nano ID68 Plus are upgradable. 
For example it comes with 4GB of 
DDR3 RAM, which Is perfectly adequate 
for most day to day computing but you 
can add more RAM (to a total of 8GB). 
You can also swap out the 500GB hard 
drive for an SSD, or even a pair of 
MmSATA drives in a RAID array. 


Benchmark results 


Benchmark 


Zbox Nano ID68 Plus 





Penguin Wee 


4.726 
327085 


* Less is better ** More Is better 
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> The small chassis of the Zbox on 
Nano still offers plenty of connectivity 


and can be kept behind a TV or monitor. 


The case itself is a small Intel NUC- 
like (127mm x 127mm x 45mm), and 
even comes with a mounting bracket 
for attaching the PC to the back of a flat 
screen TV or monitor, and there are 
plenty of connection ports, such as 
HDMI, DisplayPort and USB 3.0s. 
Because of the size of the Nano, it 
makes sense that Zotac has gone for 
mobile components, and while they 
help reduce the overall size of the PC, 
along with the cost and power draw 
(which in a case this small is essential 
to keep the components from over 
heating), it does have an impact on the 
speed of the machine. 


Steam Zbox 

Unlike the Penguin Wee, the ZBOX Nano 
ID68 Plus doesn't come pre-installed 
with an OS, and for testing purposes we 
decided to see how Valve's Debian- 
based SteamOS would perform on the 
machine. Installation was relatively 
quick and easy using Ye Olde 
SteamOSe (http://directhex.github. 
io/steamos-installer), and once up 
and running we hooked the Zbox up to 
a 42-inch 1080p TV and tried out a few 
games. Fez, a delightfully quirky 
platform game, isn't the most 
graphically demanding game, but it 
looked great on the big screen, and the 
Zbox had no problems at all running it. 
We even tried out SteamOS's in-home 
streaming beta, which lets you stream 
and play games running off one 
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machine on another. From a very 
powerful gaming PC in another room, 
connected via powerline adaptors we 
were able to stream recent games, such 
as Tomb Raider and Bioshock Infinite at 
impressive quality to the small PC. What 
wasn't quite so impressive was the 
noise of the case fans — for a PC 
designed to sit in your lounge, it’s a bit 
too noisy. It's a shame, as otherwise this 
would be an ideal media-streaming PC. 
After running our benchmarks it was 
clear that Zbox’s mobile components 
were holding it back in pure power 
terms in comparison with the Wee's 
desktop technology, but the gap isn't 
quite as large as we thought. Aside from 
the noise, its an excellent little box that 
offers plenty of power for day-to-day 
tasks, and even a spot of gaming. 


LINUX Verdict 
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ZBOX Nano ID68 Plus 


Developer: Zotac 
Web: www.zotac.com 
Price: £420 

Features 
Performance 

Ease of use 8/10 
Value for money 7/10 


» A great mini PC that has plenty of 
power for most day to day tasks, 
though can be a little noisy. 


Rating 7/10 
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K Reviews 


Chromebook C720 > 


Henry Winchester tries Acer’s latest take on the Chromebook concept — 
has it found its feet or is it just treading water? 


In brief... 


» A lightweight 
and low-end 
laptop which runs 
Google's stripped- 
back ChromeOS. 
See also: HP 
Chromebook 11 
and Google 
Chromebook 
Pixel. 


> Not enjoying 
ChromeOS? 
Then check out 
Crouton to add a 
Linux distro. 














ince they were announced three 
S years ago, we've seen lots of 

different takes on Google's 
Chromebook concept, where laptops 
simply run the Linux-based ChromeOS. 
We've gone from Google's own Cr-48 
prototype, and moved through versions 
created by Samsung, HP and Lenovo, 
and generally they have progressively 
improved. Each and every one is 
unique; HP’s Chromebook 11 is 
colourful and has even been viewed 
favourably by Apple fans, whereas 
Samsung's feels corporate and 
business-like. 

Despite being based on Linux, 
ChromeOS is somewhat limited. It’s 
designed for a singular purpose: 
running Google's Chrome browser. 

It does a few other things too, such as 
video playback and file management, 
but its raison d'etre is the internet via 
Chrome. Google is — perhaps brazenly 
— insistent that you use Google Drive, 
its cloud storage system, and Google 
Docs rather than installing, say, 
LibreOffice, and if you want to play 
games, you have to do so via a rather 


limited selection on Google's Play Store, 


as opposed to installing something like 
Steam on Linux. 

The Acer Chromebook C720, the 
company’s latest take on the 
Chromebook is thankfully one of the 
best to date. Chromebooks are 
notoriously plasticky and cheap, and 
although the C720 is made of plastic 
and costs under £200, it feels more 
premium than its Chromebook 
brethren. The dark grey finish looks just 
like expensive aluminium from a 
distance, and the chassis feels 
reassuringly weighty without being 

back-breaking. 

A nice responsive 
keyboard makes the C720 
eminently suitable for 
simple word processing 
and emailing, and while 

the trackpad is a little 
Sticky it’s not a deal- 
breaker. The 
screen is 





> Acer’s Chromebook doesn’t feel quite as nice as it looks. 


Slightly washed-out, but still perfectly 
usable and impressively viewable in 
direct sunlight. Battery life comes in at 
about seven hours of internet, which is 
a solid result. 


Know your limits 
All Chromebooks run on Intel or ARM 
processors, and here an Intel Celeron 
2955U does all the hard work. It’s 
perfectly competent, with zero lag when 
playing back HD content and has 
Snappy loading times. Browser 
benchmark SunSpider gave decent 
results, as did 3DMark’s HTML5 
browser test Peacekeeper. The 
advantage here is that it functions 
directly through the browser, rather 
than going through the layer of an 
operating system, which results in low 
system specs delivering good results. 
It's backed up with 2GB of RAM and 
a 16GB SSD - the latter may be a little 
feeble, but Google chucks in 1O00GB of 
Drive cloud storage for two years on top 
or you could use something like 
OwnCloud, if you prefer. This all makes 
the Chromebook dependent on your 
internet connection, although it does 
support offline modes. It’s great if you 
live in the kind of utopia dreamt up in 
Google's sunny Californian offices, 
where you're never more than five feet 
from a Wi-Fi hotspot; but not so much if 
you ve got a spreadsheet to finish on a 
TransPennine Express grey journey. 
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Despite its decent design, the Acer 
Chromebook still begs the question as 
to why someone would want a laptop, 
which is so limited and singular in its 
existence? But this is part of the beauty 
of Chromebooks — they don't get 
bogged down in the complexities. They 
boot up in less than seven seconds, and 
as the internet is such a humongous 
part of our every day lives being able to 
get straight to Chrome is appealing to 
many users. If it isn't then a fuller 
flavour of Linux distro can be side- 
loaded onto Chromebooks via Crouton. 
But in it’s original state, the Acer has 
modestly nailed the concept, and its 
limitations are also its strengths. It feels 
like it’s worth every penny of its £200 
asking price, too. 
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Acer Chromebook C720 


Manufacturer: Acer 
Web: www.acer.co.uk 





Price: £199 

Features 6/10 
Performance 8/10 
Ease of use 8/10 
Value for money 8/10 


» ChromeOS may choke it a little, but 
this is a great purchase for internet 
activities and day-to-day computing. 


Rating 8/10 
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Synology DS214se 


NAS units may come and go, but the Synology DS214se has an ace up its 
Sleeve — and this ace is Linux, as David Hayward finds out. 


s ynology is a company with an 
In brief... outstanding reputation in the 


network attached storage 


»» Quite possibly industry. It produces quality hardware, 
one of the most engineered to last and to provide the 
impressive NAS ; ees ie 

ithe haa o cuser best possible access for the individual. 
used. Fast and It also has an intuitive Linux-based 
simple to use. operating system built in to each of its 


DiskStation and RackStation models. 
So when we had the opportunity to get 
our hands on the DS214se NAS unit, we 
jumped at the chance. 

The feature list is impressive; with 
a Marvell Armada 370 800MHz CPU 
and 256MB of DDR3 memory running 





















» Marvell Armada 
370 800MHz CPU 





aoe rary things in the background, this two-bay 

i Se NAS unit can handle up to 8TB drive S214 

max capacity configurations in RAID O, 1, JBOD, Basic | — 

») 2x USB 2.0 and a Synology Hybrid RAID. It has a > It's a His and elegant-looking 
» 1x Gigabit LAN low-power consumption rating, a mere unit, that’s quiet and functional. 
» OS: DSM v4.3 19W, and it’s fast enough to serve your 

Patines home network with HD content at 225.5mm and weighing only 0.87Kg make using this NAS unit less of an 


administrative chore and more of an 
extension to your desktop. Different 
packages can be installed, updated and 
configured. Web services, users’ 
administration, router configuration and 
firewall settings can all be managed 


speeds measuring up to 55MB/s 
reading, and 40MB/s writing. 

There are two USB 2.0 ports on the 
back, along with a single Gigabit LAN 
port and power. The front of the unit is 
uncluttered and features a strip of 


(excluding any installed drives). 
Installing a hard drive is a breeze: 
simply slide one of the panels and the 
unit and the SATA ports are revealed, 
along with a frame on which to mount 
each of the drives. Once installed, the 


Antivirus, Audio 
Station, iTunes, 
Mail, DLNA, 
Surveillance 
Station, Media 
Server, Backup 
Server. 





DSM 

The DSM is simply 
wonderful. It’s easy to 
use, fast and capable of 
such a lot. 
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identifying LEDs that indicate the status 
of the system, LAN activity and activity 
on each of the two installed hard drives. 


Good looker 


It’s presented in a sleek, elegant white 
plastic case with sizable rubber feet and 
the Synology name acting as a vent 
across both sides, and won't look out of 
place in the lounge. It’s reasonably 
compact, too, measuring 165 x 100 x 





Administration 
Packages can be installed, 
admin tasks conducted, 
and management of the 
NAS is superb. 


rest of the process can be managed via 
the Synology DSM (DiskStation 
Manager). Here is the real star of the 
show — a flexible and very functional 
Linux-driven interface that’s leagues 
ahead of the competition. 

The latest DSM is downloaded and 
installed once the unit is up and running 
and taking over the drive(s) installed: 
this means you'll have the most up-to- 
date version to hand, without the need 
to compare version numbers for 
installed features. From here, 
maintenance and administrative tasks 
can be accessed without the need to 
trawl through the usual nested menus. 

The DSM is quick, easy on the eye 
and intuitive; there’s a handy system 
health, resource monitor, log viewer and 
current connections gadget. The layout 
is the same as that of a standard Linux 
desktop, so navigation feels natural, and 
integrating new features is a single click 
away through the package centre, 
acting very much the same as a GUI 
package manager. 

It's the level of detail, ease of use 
and quality of the operating system that 
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through the control panel. There's even 
access to the DSM terminal through 
SSH or Telnet. 

There's a lot going on, and you can 
be forgiven for forgetting you're dealing 
with a NAS unit after configuring the 
DSM to your liking. However, it does an 
admirable job of being a NAS for the 
home or small office, and thanks to the 
wonderful DSM you can guarantee 
you're getting an exceptional device. 





Synology DS214se 
Manufacturer: Synology 

Web: http://goo.gl/Jz9kIS 

Price: £120 

Features 10/10 
Performance 8/10 
Ease of use 9/10 
Value for money 9/10 


» An excellent, reasonably-priced 
NAS unit. Plus, the installed DSM is 
a dream to use and manage. 


Rating 9/10 















Philips Screeneo 


‘Reviews 


Projectors for the home user have always had a bad press. However, that all 
changes with the launch of the Screeneo, as David Hayward finds out. 


In brief... 


») A short-throw 
100-inch projector 
with every feature 
you could imagine 
under a single 
Android OS layer. 


Rear 


The rear of the projector 


has substantial 


connectivity and a very 
swish leather carry strap. 


he Philips Screeneo HDP1590 

Projector is an all-in-one unit 
that offers the user an 

experience never before found from 

a home projector. In this 339 x 287 

x 148mm unit you'll find a wealth of 

features that put most other 

entertainment systems to shame. 

The Screeneo has 4GB of internal 
memory, which is more than enough to 
power the customised version of 
Android 4.2 (Jelly Bean) that runs every 
aspect of the projector. From within the 
Ul, you can enable the dual-band Wi-Fi 
function, enable or disable the Ethernet 
port, search for media content on your 
home network, browse the internet, 
install third-party APKs, and fine-tune 
the screen output. It’s DLNA certified, 
Bluetooth enabled, Miracast enabled 
and can stream virtually anything from 
any NAS unit you have installed. 

In terms of hardware, there's plenty 
of connectivity around the back: a pair 
of USB ports, two HDMI ports, VGA, 
Ethernet, RCA analogue, Digital optical 
out, DVB-T Tuner, AV in and a Trigger 
Out for controlling projection screens. 
Around the front, located by sliding the 
brushed aluminium Philips logo 
faceplate down, you'll find yet another 
USB and HDMI port, along with an SD 
card slot and a manual focus slider. 

The projector itself is built on a set of 
Dolby 26-Watt speakers with a 
subwoofer. Using a top-projecting DLP 
system from a mere 44cm from the 
wall it can produce an image of up to 
100 inches in 1280 x 800/720P HD 





Front 

The brushed aluminium 
panel slides down to 
reveal more ports and 

a manual focus adjuster. 





) The build quality is superb, and the 2.1 speakers are more than enough. 


resolution — or from 10cm can manage 
a 50-inch display. It’s also 3D capable, 
Supporting all 3D modes as well as 
on-the-fly conversion of 2D to 3D. 


Projecting the future 


Build quality is excellent; from the 
leather carry strap on the back of the 
unit, to the spring loaded faceplate at 
the front, the Screeneo oozes a quality 
of its own that’s going to be hard to 
beat. The only off-putting element in the 
design is the dust and fingerprint- 
attracting glossy black finish. 

In operation, the Screeneo is as 
Silent a projector as you could wish for. 
The 2.1 built-in speakers easily mask 
any sound the fan makes during 
playback, and do a superb job of filling 
an average-sized living room with some 
clear, sharp sounds. The RGB LED light 
source has a 30,000-houtr lifetime, with 
a contrast ratio of 100,000:1, and is 
more than capable of holding its own 
against a similar-sized LED TV. 

There's really so much going on with 
the Screeneo that's it’s difficult to sum 
up its collective features and 
capabilities, but in truth the real star of 
the show, from our point of view at 
least, is the Android OS. Here, we have 
a superb marriage between a decent 
operating system, user interface and 
a retail product that can further 
enhance its use through the expanding 
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world it currently occupies. The UI is 
fast, fluid and easy to use, plus it played 
everything we could throw at it and, 
thanks to the inherent abilities of 
Android, there's a lot more scope for 
further entertainment options. 

Naturally, a device of this calibre is 
going to cost you a pretty penny or two; 
in fact, at £1,500 you can be forgiven for 
looking elsewhere, but bear in mind 
you'll not find this level of connectivity 
or quality in the competition. 

If it’s an all-in-one entertainment 
system you're after, and you have the 
wall space to project a 100-inch image 
onto, then you really should consider 
the Philips Screeneo as the hub of your 
living room. 
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Philips Screeneo HDP1590 


Manufacturer: Philips 
Web: www.philips-shop.co.uk 





Price: £1,499 

Features 9/10 
Performance 9/10 
Ease of use 9/10 
Value for money 6/10 


») It’s expensive — 1080p expensive — 
but considering what you get for your 
money you can’t really go wrong. 


Rating 9/10 
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parkyLinux LXDE 


Les Pounder adds some spark to his Linux distro-hopping adventures with 
this Debian-based release that’s not for novices. 


In brief... 


A fully-featured, 
tailored Debian- 
based distro for 
advanced users. 
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Apps 
Lots of great applications 
come pre-installed. 
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@ Features at a glance 






ebian has been around for 
D many years and has provided 
a stable basis for a multitude of 

great distros. Ubuntu, Linux Mint and 
Crunchbang have long used the Debian 
infrastructure to much success. With 
Debian’s multiple repositories, distros 
have a choice of foundation for their 
new project. For stability, most projects 
stick with Debian Stable; but for those 
wanting the latest of everything, Debian 
Testing is the place to start, and this is 
where SparkyLinux calls home. 

SparkyLinux follows a similar line to 
Crunchbang and provides a light and 
functional desktop environment with 
minimal clutter. SparkyLinux is around 
a 1.5GB download and comes with a 
host of applications ready for you to 
use. Favourites such as LibreOffice and 
Gimp come pre-installed, along with 
Debian-friendly rebrands of Firefox and 
Thunderbird, namely lceWeasel and 
IceDove. What is interesting is the 
inclusion of JeamViewer, the popular 
remote support and meeting 
application. The inclusion of Radio Tray, 
a neat little tray application that 
provides a choice of radio stations, is a 
great touch. Sparky also comes with all 
of the necessary codecs to play 
You Tube and popular audio files such as 
MP3 and OGG, so you will not have to 
bother with installing codecs after 
installation — a job that can be quite 
Stressful, depending on the distro. 

Software installation can be handled 
via the GUI, using Synaptic to download 
software from the Debian Testing 
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Conky 


Conky shows your system 
resources at a glance. 
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> SparkyLinux comes with TeamViewer and Dropbox as standard. It also has its 
own settings centre to enable easy configuration. 


repositories, or you can dig into the 
terminal for a little “apt-get” action. 

While using SparkyLinux, we were 
reminded of Crunchbang Linux. The 
desktop has the minimalist feel of 
Crunchbang, but includes a menu for 
quick access to applications and a dash 
of colour. The comparison between the 
two distros is complimentary, as both 
are extremely well put together and 
breathe life into aging PC kit. Both 
Sparky and Crunchbang use Conky to 
display a series of statistics on the right- 
hand side of the desktop. This is a great 
feature and very customisable by the 
user, it’s just a pity that the default 
Sparky Conky config is a little awkward 
on the desktop. 


Performance 

SparkyLinux comes in a choice of 
window managers to cater for 
machines of various abilities and 
specifications. For the majority of 
machines, the LXDE version will provide 
the right balance of speed and features. 
But if you have an older machine, or 
wish to try them out anyway, you are 
spoilt for choice, with OpenBox and 
Enlightenment versions ready for 
download. This provides much-needed 
choice, which has been missing for 
quite a few of the mainstream distros of 
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late. The Linux world is not just about 
Gnome, KDE and Unity, and 
SparkyLinux is a great showcase of this. 
Performance with the LXDE version was 
great on a Core 2 Duo machine, and the 
system resources were rarely taxed. 
Those of you with Core i3/5/7 series 
CPU will have no issues running it. 

SparkyLinux is not a distro for those 
new to Linux. To get the most from it, 
you need a little experience under your 
belt. The performance and choice 
Sparky provides are fantastic, while 
there is a version of the distro for 
gamers that provides a platform for 
modern and retro gaming. 
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SparkyLinux 3.2 
Developer: SparkyLinux 
Web: http://sparkylinux.org 
Licence: GPLv2 





Features 9/10 
Performance 9/10 
Ease of use 8/10 
Documentation 7/10 


» A great distro for experienced users, 
with excellent performance on a 
multitude of platforms. 


Rating 8/10 











PiBang Linux 


A CrunchBang derivative for the Raspberry Pi? Les Pounder fires up the 
community created distribution to investigate. 


In brief... 


>») An alternative 
Raspbian based 
distro for the 
Raspberry Pi. 
See also: Pidora. 





Raspbian repos 


Built on Raspbian for 
complete compatibility 
with Pi-based projects. 


hen Crunchbang Linux 
W came on to the Linux scene 

in 2008 it ushered in an era 
of lightweight Linux distributions for all 
types of machines that had previously 
been left unloved. The use of the 
Openbox window manager, in particular, 
gave a world mostly full of Gnome and 
KDE a new and interesting method of 
user interactivity. 

About two years ago, the creator of 
Crunchbang, Philip Newborough, was 
approached by the community to 
produce a version for the Raspberry Pi. 
Philip asked the community themselves 
to produce the distro and while PiBang 
Linux is not an ‘official’ Crunchbang 
distro, it has Newborough’s blessing. 

PiBang is a distro for those that 
want a stylish yet grown up Linux 
operating system for their Raspberry Pi. 
It's also using the standard Raspbian 
repositories, which enables you to 
access all of the existing software and 
projects that are currently whizzing 
around the community. 

The distro uses the Openbox 
window manager to great effect and the 
desktop is a minimalist’s dream. To 
access the menu all you need to do is 
click on the right mouse button and it 
appears. The amount of entries on the 
menu that appears highlights straight 
away that this a packed distro. 

There are two others versions of 
PiBang available. One uses the iSwm 
tiling window manager and another 
that’s designed as a stripped back 
server operating system. The distro — 
what ever version you choose — 





Openbox 
PiBang has opted for a 
lightweight and minimalist 
window manager. 





> PiBang is extremely easy to configure to meet your Raspberry Pi needs. 


is Supplied as an image file (.img) that 
you can transfer to a blank SD card via 
good ol’ dd. When you first boot the OS 
you are asked to create a new user who 
can be added to the list of sudoers and 
afterwards you're free to login to the 
desktop. From there you're presented 
with a configuration screen. In the post 
install screen you can configure and 
install extra software, such as Git 
version control and LAMP services. 


Bang! Apps galore 
PiBang comes with a serious amount of 
software as standard. Familiar names, 
such as Gimp and LibreOffice are there, 
though we think that they're a little too 
demanding for the Raspberry Pi. We'd 
like to swap LibreOffice for Abiword and 
Gnumeric or even Google Docs, which 
is also available via the menu. 
Elsewhere the software choices made 
by the PiBang team are quite 
pragmatic. For example, the standard 
browser for Raspbian is Midori but 
PiBang provides the options to install 
Chromium or Iceweasel if you so wish. 
We particularly like the inclusion of 
Gigolo, which can be found in the 
network menu under the name Remote 
Filesystems. Gigolo enables you to use 
remote drives via a handy graphical 
interface. We tried it out by SSH’ing into 
our main box and navigating around 
the filesystem. 

Performance is admirable and 
compares well against stock Raspbian, 
with a notably slicker speed boost from 
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Openbox. For best results we'd 
recommend overclocking the CPU 
using raspi-config to around SOOMHz. 
This should help things zip along nicely. 
The main barrier to performance is the 
hardware used in the Raspberry Pi. 
Until the true power of the GPU is 
unleashed via Wayland, all distros will 
have a speed limit. 

We found the PiBang to be a serious 
distro for those who want to use their Pi 
as both a hobby and a production tool. 
PiBang has firm roots in Raspbian and 
this provides you with a plethora of 
great software, should you need to 
install any more software as PiBang 
comes with plenty of options. If you find 
Raspbian too simplistic but still want to 
have access to its repos, then PiBang 
Should be a definite contender for a 
space on your Raspberry Pi. 
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PiBang Linux 


Developer: PiBang Community 
Web: http://pibanglinux.org 
Price: Free. Buy the creator a beer 


Features 9/10 
Performance 9/10 
Ease of use 8/10 
Documentation 7/10 


» This is a distribution for those who 
want to be as productive as possible 
with their Raspberry Pi. 


Rating 8/10 
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Nvidia GTX 750 Ti 


Nvidia’s new GPU architecture premiers in a graphics card costing just over 
£100. Dave James investigates if there's a catch. 


In brief... 


)» The first card 
from Nvidia to use 
its new Maxwell 
architecture is 
compact, efficient 
and reasonably 
powerful. A great 
choice if you're 
thinking of 
making your own 
Steam Machine. 















»> Th GPU GM107 
(Maxwell) 


» CUDA 
cores 640 


»> Base clock 
1,020MHz 


» Boost clock 
1,085MHz 


»> Memory 
2GB GDDR5 


»>» Memory bus 
128-bit 

»» Memory clock 
2,/00MHz 
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his is a first. Here we are with 
anew GPU architecture from 

Nvidia, and for once it’s not 
debuting in some flashy £500 top-end 
graphics card. Instead, Nvidia has 
decided to introduce the new Maxwell 
design in a mainstream graphics card, 
the GTX 750 Ti, right from the off. 

Keeping the new GTX 750 Ti and its 
Maxwell architecture on the same 
28nm lithography means that Nvidia 
has been able to iron out architectural 
bugs without having to worry about 
unforeseen process problems, and 
since 28nm yields are as good as 
they're likely to get, it makes perfect 
sense for a mainstream, high-volume 
card to roll out on a process that’s going 
to be produced in numbers. 

It's almost aping Intel’s method of 
CPU production — its tick-tock cycle. 
Intel creates a new architecture on an 
existing production process and then 
refines the same architecture with a die 
shrink — the tick being the shrink and 
the tock the new microarchitecture. 
This could just be a happy accident. 


Ultra efficient 

So, what is Maxwell all about? In a word: 
efficiency. That’s been the buzz word 
around most of our technology in 
recent years, but it has taken GPUs 

a long while to catch up. The graphics 
card is most likely the hottest and 
loudest part of your PC, and that’s 
partly because we've allowed it to be. 

But the times they are a-changin. 
Whereas once you could rely on a new 
die-shrink to get more processor logic 
into the same space at an equal or 
lower cost, the technological demands 
of ever-shrinking transistors is rising 
with each shrink in process — and that 
rising cost of development comes with 
production cost increases. To get more 
with less, as much performance per 
watt as possible must be developed. 
And that’s Maxwell's raison d’étre. 

The upshot of this is graphics cards 
will get more efficient in terms of power 
demands and temperatures. In terms of 
the architecture, Maxwell shares DNA 
with Kepler and Fermi, being made up 
of many little CUDA cores for that 
parallel processing goodness. It’s the 
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> Small, reasonably priced, and a portent of things to come. 


management and arrangement that's 
different — the big change is in the 
streaming microprocessor. 

The SM has evolved from its first 
appearance with the Fermi architecture: 
it was redesigned as SMX for Kepler 
and now as SMM with Maxwell. The 
new SMM re-organises the control logic 
and CUDA cores. Previously, each SMX 
housed 192 CUDA cores that were 
looked after by one piece of control 
logic. With Maxwell, every SMM is 
divided into four quadrants, with 32 
CUDA cores in each, and each with its 
own control logic. That means there are 
only 128 cores in every SMM, but each 
of the four processing blocks has its 
own instruction buffer and scheduler to 
improve efficiency and speed. 

The SMMs are smaller, which means 
Nvidia has been able to squeeze five of 
them into this GM107 GPU. This added 
logic and higher number of streaming 
microprocessors adds to the parallel 
processing power of the Maxwell chips 
and, according to Nvidia's testing, 
means it can deliver 35 per cent more 
performance from each CUDA core. 

All this talk of efficiency and elegant 
design solutions is one thing, but how 
does it perform? This isn’t a big leap 
forward in graphical performance on 
a card-for-card basis. The GTX 750 Ti 
performs at around the same sort of 
levels as the retired GTX 650 Ti Boost. 
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This board is tiny — Nvidia is confident 
we'll see half-height designs — and 
because it draws all the power it needs 
from the PCle bus, it doesn’t need any 
external power connectors. That's 
exciting because it means that those of 
us without the sort of PSU that doesn't 
have the capacity or PCle connector to 
Spare for a modern graphics card now 
have an upgrade path. 

The GTX 750 Ti will potter along at 
over 30fps in most modern games at 
the highest 1080p settings. You can 
drop the settings down a notch and get 
great gaming performance. Some of the 
minimum frame rate numbers don't 
look too healthy, but that could be a 
result of immature drivers. 


Bh) Garritan: 
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Nvidia GTX 750 Ti 


Developer: Nvidia 
Web: www.nvidia.com 


Price: £115 

Features 8/10 
Performance 6/10 
Ease of use 8/10 
Value for money 8/10 


» A good value card, with great 
temperature control and power 
efficiency. A taste of what’s to come. 


Rating 8/10 














Guacamel}lee! GE 


Matt Hanson cons a mask to play this vibrant 
platform game that's based on Mexican folklore. 


efore playing Guacamelee! Gold 
In brief... Edition our main source of 


>) An eye catching 
and enjoyably 
retro-feeling 
platform action 
game. The Gold 
Edition comes 
with extra levels, 
challenges and 
costumes as well. 





knowledge about Mexican 
folklore came from the late ‘90s 
LucasArts adventure game Grim 
Fandango, and our art editor Effie’s 
stories of what he got up to on his 
holidays back in the ‘motherland’ 

Since playing Guacamelee! our 
knowledge might not have improved all 
that much, but we've had a lot of fun 
along the way. You play as Juan 
Aguacate, an ordinary farmer who 
becomes a luchador wrestler to rescue 
E| Presidente’s Daughter who has been 
kidnapped by Carlos Calaca who, as 
you might expect, is a skeleton. 

With a beautiful and vibrant art style 
that takes inspiration from a range of 
sources, from the Day of the Dead 
celebrations to pulp Mexican movies, 
Guacamelee! looks absolutely stunning, 
with a fantastic soundtrack, yet you 
won't need an all singing-all dancing 
gaming PC to play it. The devs, Drinkbox 


Gone Home 


suggest Pentium 4 2GHz and it only 
uses OpenGL 2.1). 

It's not just Mexican culture that 
inspires the game, however, with a play 
Style that’s highly indebted to classic 
platform and fighting games, especially 
Meteroid and Castlevania. Rather than 
running through a linear progression of 
levels (like in early Super Mario games), 
you're free to explore the world (or 
perhaps we should say ‘worlds’ as you 
can switch between the world of the 
dead and world of the living throughout 
the game), with certain abilities that you 
learn on the way unlocking various 
additional locations. The combat is 
Straightforward but with enough depth 
to encourage you to try out new moves, 
and though there are a few frustrating 
difficulty spikes the gameplay and 
beautiful setting will keep you coming 
back for more — there’s even a two- 
player co-op mode. Guacamelee! feels 
like a love letter to both Mexico and 
console games of old. 





Light switches, rifling through sock draws and 90's 
cassette mixes have Neil Mohr crying. 


or a time we joked we were 
In brief... playing a light switch simulator, 


»> An exploration 
game, where you 
play a returning 
daughter from a 
trip abroad and 
discover your 
home is empty — 
what happened to 
your family? 


but as we explored the many 
rooms and corridors of this empty 
house, set in Arbor Hill, Oregon, as a 
storm raged outside, we realised we 
were exploring lives — and lives and 
experiences that made us cry. 

From The Fullbright Company, the 
game was developed to be a pure story 
exploration experience — there’s no 
combat and no puzzles as such. 

But then the whole house is one large 
puzzle, filled with memories, tapes and 
trinkets from a family’s past, which are 
waiting to be uncovered. 

It's a deeply effecting experience, 
something that can hardly be said of 
the Call of Dutys or Battlefields of the 
gaming world. Instead, Gone Home has 
you playing as a long-absent sister. 


While you rummage through drawers 
and sneak around rooms you feel like a 
interloper, intruding on people's private 
lives and it genuinely feels wrong. 
Played out through voice-over 
monologues — in the best System 
Shock style — the background story 
Slowly unravels. The 90's backdrop is 
painted in with discarded tape 
cassettes, which play live bands. Pop 
one on and as you explore, shouty girl- 
band music slowly recedes into the 
background, masked by creaking 
floorboards and rain pelting windows. 
The game's Unity engine isn't 
particularly presented at its best, the 
mechanics are clunky and you're 
unlikely to replay this — apart to find the 
odd hidden tape. It'll take you an hour 
as well, but none of this makes it 
anything but an entrancing game. 
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> Guacamelee! is like a nacho cheese 
fuelled hallucination. In a good way. 


LINUX Verdict 


eA 





Guacamelee! Gold Edition 


Developer: Drinkbox Studios 
Web: http://guacamelee.com 


Price: £11.99 

Gameplay 8/10 
Graphics 9/10 
Longevity 8/10 
Value for money 8/10 


» A vibrant, fun and amusing 
platformer that harks back to some 
of Nintendo’s classics. 


Rating 9/10 





> | wonder if mum has put the tea on? 


LINUX § Verdict 
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Gone Home 


Developer: The Fullbright Company 
Web: http://gonehomegame.com 
Price: £14.99 


Gameplay 5/10 
Graphics 5/10 
Longevity 6/10 
Value 7/10 


» On a technical level Gone Home 
isn’t good but as an emotional 
experience its entirely engrossing. 


Rating 9/10 
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Roundup 


Every month we compare tons 
of stuff so you don’t have to! 





IDEs for coding 


Whether you consider yourself a greenhorn programmer or a seasoned 
veteran, Mayank Sharma has an IDE for you. 








File Edit Code Navigation View 


G & 


@ Doao= 


Project Tools Hel} App &xr 








G% Start Page x 


$post = 








Edit Search View Document 






69 <?php 


71 wp_admin_css{ ‘wp-admin', true ); 
72 wp_admin_css({ ‘colors-fresh’, 
wp_admin_css{ ‘ie’, true ); 





75 // Remove all stored post data on 


190037: This ts Geany 1.23.2. 








selection 


»> Aptana Studio 
»> Bluefish 

»> Eclipse 

»> Geany 

)) Komodo Edit 
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wp-comments-post.php x 


($comment_post_ID); 


Project Build Tools 


true ); @ acti 


76 // This could be added by add actionf'loain head'...) like wo shake isf) 
LEE RLL LEE LEO LEN LR RT NR NNO EL I 


f ( empty( $post->comment_ ste 


ob 


Help 


7: o- © XX € > B® Bs £Q 9% & 
p-comments-post php * wp-login.php »* Symbols | Documents = 
Pte sshake_e >; = apply_filters( ‘shake_error_codes', $shake_e _codes ); | 
56 if ( Sshake_e les && § ->get_error_code() && in_array( Sw ->get_j g [250] + 
57 add_action( ‘login head’, ‘wp shake js’, 12 ); 

58 

59 ?><IDOCTYPE html> 

60 <!--[if IE 8]}> 

61 <html xmins="http://www.w3.org/1999/xhtml" class="ie8" <?php language_attribute 

62 <! [endif] --> 

63 <!--f{if !(IE 8) j><! 

64 <html xmlns="http www.w3.org/1999/xhtml" <?php language_attributes(); ?>> 

65 <!--<! fendif]--> 

66 <head> 

67 <meta http-equiv="Content-Type” content="<?php bloginfo( 'html_type’); ?>; charset=< 

68 <title><?php bloginfo({ name’); ?> &rsaquo; <?php echo $title; ?></title> 


logging out. 
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n Integrated Development 
Environment, or IDE, is a 
software application that’s 
designed to help developers 
build software. And when it comes to 
building software, the right tool for the 
job can really make all the difference to 
your workflow and efficiency. 

We've come a long way since the 
days developers would edit source code 
in viand run ce from the command line 
to compile the code. A modern day IDE 
offers a richer code creation and editing 
experience. Most of them now include a 








if( freqs.length == 6) 
System.out.printin("No frequency table created due 

else{ 

for(int 1 = 6; i< 
System.out.printin(“cha 


@ Javadoc {&, Dectaration 




















int{] freqs = createFreqTableURL{"http 


NUM_ASCII_CHAR; i++){ 
harcater code 


a ee 


System.out.println("Total characters in f 


feature-rich source code editor with 
intelligent code completion features, a 
graphical user interface builder and 
even a debugger to help pinpoint 
problems in the source code. 
Development environments not only 
help you if you are a new programmer, 
they also simplify your workflow when 
you are Starting out with a new 
programming language. Not all IDEs are 
the same, however, they come in all 
Shapes and sizes. There are simpler 
ones that are nothing more than an 
over-glorified text editor and complex 
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How we tested... 


We installed all the IDEs via their 
recommended method of 
installation. For consistency, we tried 
all the apps on top of the latest 
Fedora 20 running Gnome 3.10.2. We 
also noted and fulfilled any special 
requirements by any project, such 
as Eclipse and Aptana Studio which 
need Oracle Java to work. 

All the IDEs support multiple 
programming languages, and since 
we are on the lookout for a general 
purpose editor that’s useful across 
multiple languages, we tested all 
kinds of projects in all the IDEs. 

To rate their prowess in handling 
complex projects we used them to 
tinker with popular open source 
projects, including Wordpress which 
is written in PHP and TWiki that’s 
coded in Perl. We also tried snippets 
of code in other popular languages 
such as Java, HTML5, JavaScript, 
Ruby and CSS. 





ones with endless menus that are 
cumbersome to operate. 

In this Roundup we'll be looking at 
some of the most popular IDEs that are 
designed to be of use to a large number 
of coders because they support quite a 
few programming languages. We'll test 
the features that are offered by their 
code editors, appraise them for 
encouraging and fostering team 
collaboration, rate their user interfaces, 
check out their supported plugins and 
comment on the skills of their various 
debugging features. 








Code editor features 


How do they assist the programmer? 


he most important part of any 

IDE is the code editor. It’s where 

they write, debug and tweak their 
code. In essence a code editor isn't 
unlike a text editor. However, unlike a 
vanilla text editor, a code editor has 
several features, such as syntax 
highlighting, code folding, code 
completion and a lot more to aid the 
developer to better visualise and 
organise the code. 

Geany’s code editor provides the 
most basic assistance. It does syntax 
highlighting and can fold code blocks. 
Although it doesn't auto-close braces, it 
does colour code them for you which 
will help you to identify any unclosed 
ones. Web developers will also 
appreciate Geany's ability to auto-close 
XML and HTML tags. 

Bluefish does code block folding as 
well. Additionally, it also highlights 
matching start and end markers for 
both brackets and tags. So when you 
click on a bracket, it highlights the 
corresponding closing or opening one. 

The editor also does auto- 
completion and automatically closes 


Revision control support 


tags for several programming 





wp-comments-post.php (/romefbodhi/Downloads/prajects/wordpress/wp-comments—pos ) 
p p 


Fie Edit View Document Go Project Tools Zencoding Tags Dialogs Help 


languages. Furthermore, it 3 ie 
displays reference information 
which is a really handy feature 

if you're new to a particular 
language. You'll also get this 

help even if you have nested 
code in another language, 

such as JavaScript inside a 

PHP program. 

Another useful feature in 
Bluefish is the Snippets Bar 
from which you can add the most 
common snippets of code for a variety 
of languages. 

In addition to folding code and 
checking syntax, Komodo will also 
highlight variables. So you can double- 
click on a variable to see all occurrences 
in the code. A major plus is its ability to 
do code refactoring, where It can 
rename variables, class members and 
extract methods. 

Eclipse does code-refactoring as 
well. You can use it to extract the 
selection as a local variable or as a 
method. In addition to providing the 
usual assistance for code navigation, 


Do they allow collaboration? 


he most common way to 

collaborate on projects is via a 

revision control system, such as 
Subversion and Git. Bluefishis a 
disappointment in this department as it 
doesn't support any. 


Geany uses the GeanyVC plugin to 
enable access to Bazaar, Git, Mercurial, 
Subversion and CVS. However it only 
supports diff, log, status, revert and 
commit. Komodo Edit doesn't have 
revision control capabilities. Komodo 


Preferences 


Git 


Plug-in Development 


Cioning repositories 


+ Run/Debug 


Default repository folder 


Team 


+; CVS 


File Content 


Commit Dialog 
Configuration 

Confirmations and Warnings Merge 
History 


Label Decorations 


Projects 


LL I Ne 


Synchronize 
Window Cache 


ignored Resources 


LARA 


IRR 


Models 


Automatic refresh 


Secure Store 


fhome/bodhi/git Browse... Variable 


Remote connections 


Remote connection timeout (seconds): 30 


# Refresh resources when index changes 


¥ Refresh only when workbench is active 
Merge tool content: Prompt when starting tool 
Blame Annotations 


_) ignore whitespace changes 


Store credentials in secure store by default 


Restore Defaults Apply 





> You can use Eclipse to collaborate with multiple developers. 
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Quickbar Standard HIMLS Formatting Tables List CSS Forms Fonts Frames 
BEE GS6b Bf SBEGHS BBe 
C Apache DHTML DocBook HTML PHP+HTML PHP Replace SQL 

eee a 


Ge _.wnioadsiprojects/wordpress v | 62 


do_action{ ‘comment_on_draft’, Scomment_post_ID ); 


66 | exit 
© 67 @)} elseif J post_password_required( Scomment_post_Ip ) § { 


a 
68 8 ‘ 


assword_protected', Scomment_post_ID ); 


Scomment_post_ID ) 


SSDP IE BICKER A ABEL OR SEE 
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Eclipse \lets you reshape the layout of its 
editor. You can detach views and editors 
and combine multiple views into a 
single window. This is particularly useful 
for those who work with windows 
spread across multiple displays. 

You can customise the layout of the 
editor with Aptana Studio as well. 
Besides the usual code navigation 
features, such as auto-completion, 
Aptana will also assist developers by 
suggesting and explaining tags. When 
you type a tag, it will show a list of 
similar tags and give you an explanation 
of what each tag does. 





IDE can, however, work with the CVS, 
Subversion and Perforce source code 
control systems, although you still can’t 
create or configure repos and branches 
from within the IDE. The IDE also 
enables developers to edit a document 
simultaneously, and store/share 
common snippets and macros via the 
publish feature. 

Aptana Studio ships with a built-in 
client for CVS to access repos. You can 
also add support for others via plugins, 
but we found the documentation very 


unclear and the plugin links were broken. 


Eclipse handles version control very 
maturely. The EGit plugin adds the Git 
distributed VCS within the IDE while the 
Subclipse plug-in adds support for 
Subversion. Both the Xpairtise and 
Saros plugins are popular as they 
enable multiple developers to work on a 
file simultaneously and see changes in 
real time. 


> The Bluefish 
Snippets Bar 
adds a lot to 
the experience 
of working with 
the app. 


Verdict 





Aptana Studio 
kkk 
Bluefish 
kkk IK 
Eclipse 

kkk kk 
Geany 

kak 
Komodo 

tok KIO 


» Bluefish’s 
code editor 
implements a 
large number of 
useful features. 


Verdict 





Aptana Studio 
kkk 
Bluefish 
Kk Kk Kk 
Eclipse 
Kt Kk 
Geany 

kkk 
Komodo 
KK IK 


» We’d suggest 
using Eclipse if 
collaboration is 
important to 
your project. 
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Getting started 


Is the user interface intuitive enough? 


he apps covered in the Roundup offer a 

plethora of features and support a wide 

array of programming languages, some 
natively and some via add-ons and plugins. 
These add-ons bring greater complexity that 
should be handled by a well-designed UI. 


Geany **** 


Geany is straightforward to adopt as it’s a glori 


interface doesn't try to conceal that fact. The latest version is in the 


All the IDEs in the Roundup have a different 
layout. Some even allow their users to heavily 
customise the layout to suit their workflow. 
That said, users should see this flexibility as an 
optional benefit and not a necessity for using 
the app. This is why we'll award those IDEs 





that expose their functionality and features by 
making judicious use of the user interface, 
instead of just overwhelming the user with 
endless menus. We'll also rate IDEs based on 
how they welcome them to make sure they 
don't inundate the user with information. 


wp-togin.php — /home/bodhi/Downloads/projects/wordpress — Geany 


ile Edit Search View Document Project Build Tools Help 


fied text editor and the 


p-comments-post php x  wp-login.php * 


S$shake_error_codes = apply_filters( ‘shake.error_codes', Sshake_error_codes ); 


evmv~E OG @*@ ei ¢€ >? S£O-R% 'B 4/Q 


49% & 


Symbols | Documents 


repos of all major distros. You'll also need to install its 20 core plugins. 
When you launch the app you're greeted with a clean interface and a 
prominent code editor with a simple layout. From here, you can get 
cracking with existing code file or create a new one using one of the 
Supplied templates. We found autocomplete and code folding other 
conveniences aid the developer in writing and reading the code. When 
you're done you can use the well-placed buttons to compile, debug and 
run the code from within the IDE itself. 

Geany ships with just the right amount of configuration options to 
show off its flexibility without overwhelming the developer. 


wp-—comments-post.php (/home/bodhi/Downloads/projects/wordpress/wp-comments—post.php) - Bluefish 2.2.5 
File Edit View Document Go Project Tools Zencoding Tags Dialogs Help 
> ae % eo * F Q Qe 


Quickbar Standard HTML5 Formatting Tables List CSS Forms Fonts Frames 


BRB MaG@eee BH SHEGHS Be 


C Apache DHTML DocBook HTML PHP+HTML PHP Replace SQL 


» @ | BE ES w& 


Gi ...wnloads/projects/wordpress v (62 
62 | 
© iid bodhi § 63 : 
Biea lL ' 
65 | do_action( ‘comment_on_draft', Scomment_post_ID ); 
. }66 exit; 
* | Documents : BH) elseif  post_password_required( Scomment_post_ID ) § { 
+ &@ Downloads | les 7 * Fires when a comment is attempted on a password-protected post 
§ \70 , 


#16 
» kit Desktop e i¢ 


Aaa 
+ {iii projects : 72 | * param int Scomment_post_ID Post ID. 
: 4 do_action( ‘comment_on_password_protected', Scomment_post_ID ); 
i 

> ga wp-admin 
> GS wp-content 
* ge wp-inciudes 
» fii Komodo-Edit-8 Scomment_post_ID Post ID 


do_action( ‘pre_comment_on_post', Scomment_post_ID ); 
geany-_run_script.sh ( ‘pre_ _on_p _post_ID ) 
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ll the IDEs in this Roundup will 

help you write code in multiple 

programming languages. 
However, many of them are designed 
for a particular language. 

Aptana Studio, for example, is 
designed to build Ajax web apps and 
supports the latest HTML5 spec. But 
you can also use it author code in 
HTML, CSS, JavaScript, PHP and Ruby. 

Komodo can, in addition to these 
web-based languages, aid in the 
development of Node.js, XSLT, Python 


and XSLT. 


MediaWiki and Wordpress. 
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if 


( Sshake_error_codes && Swp_error->get_error_code() && in_array( Swp_er ror->get_f 
add_action( ‘login_head‘, ‘wp_shake_js‘, 12 ); 5 


?><!DOCTYPE html> 
<!--[{if IE 8]> 
<html xmlns="http://www.w3.org/1999/xhtml” class="ie8" <?php language_attribute 
<! [endif] --> 
<t--[if !(IE 8) J><!--> 
<html xmlns="http://www.w3.org/1999/xhtml" <?php language_attributes(); ?>> 
<!--<! [endif] --> 
<head> 
<meta http-equiv="Content-Type” content="<?php bloginfo(‘html_type'); ?>; charset=< 
<title><?php bloginfo{‘name’); ?> &rsaquo; <?php echo Stitle; ?></title> 
<?php 
wp_admin_css( ‘wp-admin’, true ); 
wp_admin_css({ ‘colors-fresh’, true ); 
wp_admin_css({ ‘ie’, true ) 


// Remove all stored post data on logging out. 


a | 
@P 9 (250) | 
@ login_footer [213] 

@ login_header [33} 
@ retieve_password [270] 
@ 8 (249) 
@ shake [251} 
@ wp_aitempt_focus [883} 
@ wo_iogin_viewport_meta [257} 
@P wp_shake_js (243} 
@ Variabies 
@ action 403] 
@ action (407) 


@ action (411) 








Language support 


What programming languages do they support? 


and many more languages, with its 
code intelligence features for auto- 
completion and easier code navigation. 
However, it’s debugger will only accept 
PHP, Python, Perl, Ruby, Node.js, Tcl, 


Web apps are also a speciality for 
Bluefish. |t includes language definition 
files for Perl, PHP, Python, C/C++, CSS, 
Google Go, HTML5, JavaScript, and 
more. Bluefish also has support for 
popular open source web apps such as 


by add actionf‘loagin head‘...} like wo shake is/{) 
: a allow [331] 


Status 19:00:37: File Mome/bodhi/Downloads/projectsAwordpress/wp-comments-post php opened(1) 


$:05:19: Fite nome/bodhi/Downioads/projectswordpress/wp-login.php opened(2) 
Compiler 299 e/D00! wnioads/projectswordpress’wp-iogin.php opened( 


Bluefish **** 


You can install Bluefish using your distros package manager tools after 
adding its custom repository. Bluefish is as fast as Geany to launch, and 
it presents a similarly clean interface. 

You can either open an existing file or start a project using one of its 
Supplied templates. The Snippets Bar and the HTML toolbar are 
wonderful assets when writing code. Using these even programmers 
new to a language can quickly cook up code without much familiarity 
with the syntax. All you need to do is select the element you wish to add 
from the menu, define any options and values and let Bluefish create the 
corresponding code for you based on the values you selected. 

You can also control the behaviour of its tags from the app’s 
preferences which also allows you to tweak other aspects of the IDE and 
its code editor. 





Verdict 





The relatively simple Geany supports a 
programs written in C, PHP, HTML, Bluefish 
Python, Perl, Pascal, and Java etc. If it’s kkk 
Java you want to edit, you should use Eclipse 

: sa <a Oe, Ne tok In 
Eclipse which is written primarily for Geany 
that language. However you can also kkk 
use it for other languages, such as C++, Komodo 
Python, Perl, PHP etc by means of KKK 
different plugins. The IDE also has ») Bluefish does 
various dev environments, including the enough to 

; satiate the 
Eclipse Java development tools (JDT) needs of web 
for Java and Scala, Eclipse CDT for C/ developers. 


C++ and Eclipse PDT for PHP. 
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Komodo Edit ** * ** 


ActiveState produces two IDEs. The freely available Komodo Edit which 
we evaluated in this Roundup and the commercial Komodo IDE, which 
you can evaluate using a 21-day free trial. The app is available as a 
compressed archive that includes an installation script. 

When you launch the app, it shows you a Help screen which points 
you to some introductory documentation and screen casts. As with 
Geany and Bluefish, you can either load an existing project or create a 
new one using a template. Komodo has templates for more than 50 
programming languages and includes sample projects for HTMLS, Perl, 
Python and Tcl. The code editor does a nice job of presenting the code 
and has the usual conveniences to make it easy to navigate. It also lets 
you easily create reusable code snippets. 


avigate Search Project Run Commands Window Help 
cs rommaoa 48 


# @ $% 0 a w”* 


oject E =0 a wp-blog-header php 


een 


Eclipse ** 








ns bv *& A 


} 


fle Edit Source 


Eclipse is by far the most feature-rich IDE in our Roundup. There's not re 


much involved in getting started with Eclipse if you have the required 
components, though. Just download the compressed archive, extract 
and run. Eclipse is slow off the blocks and only performs well on fairly 


well equipped machines. 


The main interface of the app is divided into different panels. At first 
glance it looks a bit daunting. Unfortunately, this doesn’t change even 
after spending some time with the app. If you are new to Eclipse, you 
should take some time to familiarise yourself with its working 

One unique feature is Perspectives which let you customise the 
layout and contents of the windows. However, it'll only be a hindrance to 
novice users who'll struggle to discover major features and functionality. 








Help and support 


Where do you look for assistance? 


hanks to all the functionalities 
crammed into them, IDEs are 
complex pieces of software. 
No matter how many years of 
programming experience you have, 
sooner or later you'll need to refer to 
some kind of documentation to make 
the most of a particular feature. 
Bluefish scores poorly in the support 
department. The app doesn't include 
any sort of offline documentation and 
only has a barebones manual hosted on 
its wiki. However, the app is pretty 


popular with developers and you'll find 
several tutorials and guides on the web. 
Even the lightweight Geany does 
better which ships with an illustrated 
user guide. However, besides a FAQ 
there’s not much information on its wiki. 
Aptana Studio ships with integrated 
help and has an online wiki which it 
shares with its other IDE, Titanium 
Studio for mobile development. 
Aptana's support also includes a board 
which is a collection of tagged 
questions on Stack Overflow. 
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$status = get_p ost 


if ( | comment 


wp-comments—post.php (~/Downloads/projects/wordpress) — Komodo Edit 8.5 


File Edit Code Navigation View Project Tools Help 


Beh @ Oo" 
_| wp-comments-post.php x 


_post($comment_post_ID); 


if ( empty( $post->comment_stetus ) ) { 


tion({ ‘comment_id_not_found’, $comment_post_ID ); 


“status($post); meet 


$status_obj = get_post_status_obje 


_open{ $comment_post_ID ) ) { 


Aptana Studio ***** 


The IDE is based on Eclipse and requires Oracle Java Runtime 
Environment. It also requires Git for version control and if you intend to 
do Ruby on Rails development you'll also need to make sure the 
development environment is fully set up. It’s also advisable to check out 
the Getting Started guide on the website for other requirements. 

There’s no installation if you are using the standalone version of the 
IDE. Just download, extract and run the app. When you launch the app for 
the first time, you'll need to choose a workspace folder for your projects. 
As with other IDEs, you can create a new project using one of the 
supplied templates. The IDE inherits some of the best features of Eclipse, 
including the ability to only show you commands depending on the type 
of file you are editing. It also explains Keywords and other elements. 





ava ~ fhome/bodhi/Downloads/projects/FreqT ableExampieOriginal java ~ Eclipse 


Refactor Navigate Search Project Run Window Help 


~O-raQa-y 


Serie ~~: F JRO. 


id) FreqTableExampleOriginat java 3 


+import java.io.File; 


public class FreqTableExampleOriginal { 


public static final int NUM_ASCII_CHAR = 128; 


i 
{ 


@, FreqTableExampleC 


?* NUM_ASCII_CHA 


int[{] freqs = createFreqTableURL("http://www.utexas.edt 


if( freqs.length == 6) 


@ * createFreqTableU 


System.out.println("No frequency table create ue 


se 
for(int i= 6; i< 
System.out .prin 


NUM_ASCII_CHAR; i++){ 
tln("charcater code: " + 


@ ° createTable(Strin 


System.out.println("Total characters in file: "+ ¢ 


OME LEAS ALES LESSEN LE LILES LER TEA LET: 


& Problems 8% @ Javadoc [& Declaration 


0 items 


Komodo dispenses support via its 
online forums where they also host a 
collection of FAQs. The project also has 
quite a few screencasts on its YouTube 
channel, some of which are linked in the 
start screen of the app. Komodo also 
has detailed built-in documentation 
that covers every feature in detail. 

Eclipse leads the pack in this area 
with large amounts of information in 
the application and even more available 
online on its YouTube channel. The app 
also comes with sample projects. 











Aptana Studio 
kkk 
Bluefish 
KkkkKK 
Eclipse 

kkk KK 
Geany 

kkk 
Komodo 
kkk 


» You’ll find 
user-contributed 
screencasts for 
all the apps on 
YouTube. 
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Debugging support 





Do they make this task any easier? 


major chunk of any developers’ 

time is spent debugging their 

own creations. Duties such as 
streamlining their code, removing 
inconsistencies and polishing the rough 
edges are anecessary part of the 
development process. The amount of 
time this takes and the sanity sucking 
nature of the task can be simplified 
with a selection of the right tools. The 
most popular open source debugger is 


EvalError 


RangeError 


ReferenceError 


SyntaxError 


the GNU Debugger (GDB) which works 
for many programming languages and 
offers extensive facilities for tracing and 
modifying their code. While many of the 
IDEs use GDB, some have a debugger 
of their own. 

Both Komodo Edit and Bluefish 
don't ship with a debugger, so you'll 
have to debug your programs outside 
the apps. The advanced retail version of 
Komodo does ship with graphical 


Each workbench window contains one or 
nore perspectives, which are made up of 


ews and editors 


Cancel 





> Aptana enables you create, manage and run several debug configurations. 





debugger that can deal with code in 


PHP, Python, Perl, Ruby, Tcl and Node,js. 


One notable feature of the debugger is 
the HTTP Inspector that can inspect 
browser-server communications. 
Although Geany relies on GDB as 
well, but it does one better. The IDE has 
its own debugger plugin which lets you 
debug from within the application. 


Currently, the plugin only supports GDB, 


but support for other back-ends is 
planned as well. 

Aptana Studio has its own custom 
debugger that can handle code written 
in Ruby on Rails and JavaScript. Using 
this debugger you can do the usual 
tasks you'd expect, such as setting 
breakpoints, inspecting variables and 
controlling execution. 

Like Aptana, Eclipse has a special 
debug Perspective which gives you a 
preconfigured set of views for 
debugging Java code. In this 
Perspective you can control the 
execution process of your programs 
and can investigate the state of the 
variables. You can also hook up GDB 
with Eclipse and along with several 
other third-party debugging tools. 


Verdict 





Aptana Studio 
KKK 
Bluefish 


Eclipse 
kkk 
Geany 
kkk 
Komodo 


»» Most IDEs 
tend to ship with 
debuggers for 
their preferred 
languages. 





What more can they do? 


ll the IDEs we featured rely on 

plugins to extend their core 

functionality, and you'll have to 
use one or several plugins to make best 
use of the IDE. Much of Bluefish's 
functionality is based on plugins, so 
much so that you'll have to install its 
plugins package along with the IDE 
itself. The app has plugins to create 
HTML dialogs, add snippets of code, a 
character map, zencoding for improving 
HTML & CSS workflow and more. 

Geany too has lots of plugins. Some 
that ship with Geany enable you to 
insert HTML characters, create source 
files for new class types, add the file 
browser tab in the side and provides 
different actions related to saving files. 
The project also collates several 

plugins in various states of completion 
on http://plugins.geany.org. On the 
website you can read about each plugin, 
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check features and usage instructions, 
before you download and install them. 

Some of the most useful plugins are 
for debugging: there’s the GenDoc 
plugin for auto-generating 
documentation, Geany Macro which 
enables user defined macros, and the 
Addons plugin which adds such things 
as bookmark list, status icon, etc. 

Komodo too has a dedicated section 
on its website where it hosts additional 
plugins. The project claims to list over 
100 add-ons. Some useful extensions 
are the NST Code Browser, Emmet 
toolkit for improving HTML, the JoDo 
helper, MySQL database explorer and 
the CakePHP code intelligence. 

Plugins for Eclipse come through 
the Eclipse Marketplace. Many are free 
though some are paid-for only. Unlike 
other projects, the Eclipse marketplace 
is a whole ecosystem in itself. 


www.linuxformat.com 


Add-ons and plugins 


Abyss Skin 1.0 


@& Get Add-ons er cee ee 
: ActionScript Language 1.0.0 
easel fol gts > 


tionScript lanquage support for Komodo (UDL-4 


Plugins Breadcrumbs 1.0 


vide context for the files you are working with 


Crystal Project Icons 1.0.0 


he Crystal Project exists to create a vivid and cc 


Django Language 1.0.0 


Django language support for Komodo (UDL-based 





> You can install Komodo plug-ins 
from within the IDE itself. 


You can browse and search plugins, 
explore them in detail and view 
screenshots. Some even have detailed 
user guides and support forums of their 
own. Users can also comment, discuss 
and review plugins. To install a plugin all 
you need to do is drag and drop it into a 
running Eclipse Workplace. Aptana 
Studio can itself be plugged into Eclipse. 


AV(=i coh (ati 





Aptana Studio 
kkk kK 
Bluefish 

kk 

Eclipse 

kkk IKK 
Geany 
kkk 
Komodo 
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» Eclipse 
trumps them all, 
but the other 
IDEs also have 
useful plugins. 








hoosing an IDE depends on 

your requirements as a 

programmer. The language you 
are programming in and the size of your 
project are two of the most important 
criteria for selecting an IDE. 

Bigger and complex tools can scale 
down, but the reverse is only possible to 
a limited extent. Case in point is 
Bluefish which is suitable for individuals 
working on web-based projects, 
including complex ones, such as 
WordPress and MediaWiki. However, the 
IDE lacks a debugger and there's no 
support for any version control system, 
which rules it out for team projects. 

Then there's ActiveState’s Komodo 
which is available in multiple versions. 
The free Komodo Edit is a basic editor 
that can be extended with plugins. 
However, it’s overshadowed by its 
commercial sibling, Komodo IDE. This 
version has all the features you'd 
expect, including a built-in debugger. 





Eclipse KKKKK 


Web: www.eclipse.org Licence: EPL Version: 4.3.1 


The other three IDEs all get LXF's 
stamp of approval. We aren't asking you 
to install all three, but between them 
they cover all types of programmers 
who flip through these pages. 

lf web and scripting languages are 
more of your style, Aptana is well suited 
for the task. PHP, Ruby on Rails, and 
Python are supported as well as Adobe 
Air. However, If you want to use it with a 
more comprehensive IDE, the app is 
also available as a plugin for the Eclipse. 

For individual developers, there’s no 
better option than the lightweight 
Geany which supports all the major 
programming languages. It features a 
simple layout and has a clean interface 
that doesn't overwhelm users. Despite 
its lightweight 
nature, the app 
offers all the 
common features 
that you expect 
from an IDE, which 














)» Geany works across platforms, including a portable app. 


makes it a wonderful general purpose 
IDE for individual users. 

But in terms of features and 
execution, there's no beating Eclipse, 
which supports a range of languages. 
Eclipse has a loaded interface and is 
overkill for individual users. However, it 
gives you a future-proof environment 
that prepares you for tackling bigger 
projects in the real-world. 


“Eclipse gives you a future-proof 
environment that prepares you 
for tackling bigger projects.” 


Komodo Edit * *>* 


Web: http://komodoide.com/komodo-edit/ Licence: MPL Version: 8.5.3 


»> The best IDE for all-round development. 


@ Geany KK KKK 


Web: www.geany.org Licence: GNU GPL v2 Version: 1.23.1 
» A flexible IDE for the individual developer. 





Aptana KKKKK 


Web: www.aptana.org Licence: GNU GPL v2 Version: 3.4.2 





» A feature-limited app that doesn’t offer anything spectacular. 


Bluefish * * * 


Web: http://bluefish.openoffice.nl Licence: GNU GPL v2 Version: 2.2.5 
» Isn’t bad as such, but loses out to more feature-rich peers. 





Over to you... 


» The perfect IDE for web-based projects. 


Also consider... 


While, we've covered the most popular ones, 
there are several other expansive as well as 
lightweight IDEs you can check out. If you are 
used to emacs or vi, we wouldn't even try to 


pluck you away from these versatile and 
evergreen tools. 


However, despite their flexibility we can't 
recommend them to new developers because 


of the steep learning curve and access to 
easier alternatives. Java developers impressed 
by Eclipse should take a look at NetBeans 
which includes a wonderful graphical user 
interface designer. Programmers that dabble 
with C# code should consider MonoDevelop. 
If you are looking for no-nonsense IDEs there's 
also Anjuta, KDevelop, and Code::Blocks. 


www.tuxradar.com 


Do you agree with our choice? What IDE do you swear by or have 
sworn at? Email your opinions to Ixf.letters@futurenet.com 


Of late there has been a surge of web IDEs. 
These IDEs reside inside your web browser and 
are naturally ideal for developing web apps. 
Some popular web IDEs are Cloud9, ShiftEdit, 
and Codeanywhere. These platform support a 
large number of programming languages, 
including HTML, CSS, PHP, Java, JavaScript 
and several others. 
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ore than 100 distros are a while, it's time to ta R c good look at the behind them, but that doesn't mean they 





listed on distrowatch.com other options out there. are technologically superior to pure 

and all of them want a slice The top distros don't just cater to community-supported efforts such as Linux 
| of your hard disk. But a particular audience anymore. Things were Mint and Mageia. 
| choosing a distro is an involved process, simpler when distros were known for sticking Over the next few pages, we will analyse ao 
| and this is why many users prefer to to and polishing their default desktops. five distros (Ubuntu, OpenSUSE, Fedora, = 
| stick to the one they have set up and Fedora was the premier Gnome distribution, Mint and Mageia) to test their strengths and 
: update it every six months - identify their weaknesses. 


fe) aes We'll nitpick their installation 


66 b md 
However, most distros — If you ve been using the Same and upgrade process, 
especially the more popular comment on their package 


ones — are constantly evolving. distro for a aatiten it’s ahaa Ke) managers, fiddle around with 
rs distro a fell out of favour look LE the other o) o) aCe) ats : 99 their rae os oe 


for introducing a new feature and assess their usability to 





in one release might score find the perfect Linux 
better than its peers when that feature OpenSUSE was known for its KDE desktop, desktop distribution for you. 
stabilises in subsequent releases. and Ubuntu was the only newbie-friendly Don't despair if you are an advanced 

Of course, we aren't going to suggest distro, with a novel software centre. Linux user. We'll also look at the top distros 
that you keep hopping distros whenever Some of the top distros, including Ubuntu, _ for experienced Linux campaigners, cherry 
a major player unveils a new version. But if Fedora and OpenSUSE, have the resources of _-pick distros made for older hardware and 
you have been using the same distro for million-dollar multinational corporations delve into the realm of specialised distros. 
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Do they come with stabilisers? 


Although some hardware vendors retail 
computers that are pre-installed with Linux, 
for most users the Linux journey begins at 
the installer. 

Linux Mint borrows the installer from Ubuntu — it’s easy 
to use and intuitive enough for new users. The original 
installer in Ubuntu has options to install updates and third- 
party software, such as codecs. These options aren't 
available in the Mint version, which automatically installs 
the codecs and plugins. 

Mint’s installer can install to an LVM partition, but it 
doesn't let you create one. However, Mint does offer the 
option to create an LVM scheme when you ask it to take 
over the complete disk. Similarly to all the other installers, 
Linux Mint’s will encrypt the partition. 

Ubuntu's Update Manager checks for the availability of 
new releases and helps you upgrade, while the 
recommended method for upgrading Mint is a clean install. 

The new Fedora installer has stabilised and works well 
on disks with both simple and complex layouts. Although 
not very intuitive, it can create an LVM partition scheme 
and set up a user account while files are being copied. 
Fedora's installer doesn't have an option to upgrade, and 
instead relies upon the new FedUp tool. This can use a 
network repository or a DVD image as the package source. 

If you want installers that can cater to both novice and 
advanced users with complex disk and network set-ups, 
then take a look at Mageia and OpenSUSE. The OpenSUSE 
installer allows creation of an LVM partitioning scheme; it is 
also more intuitive and has a better layout than Fedora’s 
installer. OpenSUSE can encrypt partitions and creates 
users during set-up. In addition, it is the only installer that 
allows you to select a network authentication method such 
as LDAP or NIS, as well as a password encryption scheme. 

OpenSUSE’s installer allows you to review all changes it 
is going to make. From this screen, you can make 








INSTALLATION SUMMARY 
E23 gb 


LOCALIZATION 


DATE & TIME 
Asia/Kotkata timezone 


KEYBOARD 
English {UK) 


SYSTEM 


INSTALLATION DESTINATION NETWORK CONFIGURATION 


Wired {p2pi} connected 


Gut 


> Please complete Rems marked with this icon before continuing to the next step. 


alterations to elements that were automatically configured, 


such as the location of the bootloader. We think this approach 


works better than Fedora’s hub-and-spoke model. 


The partitioning mode in Mageia 4's installer can be used 
in Simple or expert mode. The auto-allocate option creates an 


easy layout in simple mode, whereas expert mode offers 

three options based on the intended use of the installation. 
After creating a partition, you can configure its mount 

options. For example, you could mount it as read-only. You 


can even create logical volumes from within the installer and 


add partitions to it, which can then be encrypted. 

The installer lets you pick which bootloader to use and 
supports Grub, Grub 2 and Lilo. You can also modify its 
entries and pick the location for installing the bootloader. 


Before installation, the installer removes unwanted packages, 


such as language support, but doesn't create any users. 

Mageia has tools that will update the system from online 
repositories, and you can use the DVD to upgrade to newer 
releases. These facilities make it really easy to refresh your 
system when necessary. 


FEDORA 20 INSTALLATION 


The new 
Anaconda 
installer uses 
a hub-and- 
spoke model 
instead of a 
linear wizard. 





Mageia 4 
Ubuntu 13.10 
Linux Mint 16 


Fedora 20 





OpenSUSE 13. 


The Ubuntu 
installer lacks 
the flexibility 
offered by 
OpenSUSE 
and Mageia. 











There is a slew of regular distros, but plenty of 

specialised examples, too. Some can be run as 
regular desktops, but most exist to quench the 
thirst for a particular genre's best apps. 





Some of these specialised distros can 
even double up as regular desktops. 


Interested in producing multimedia, but want to 
avoid the hassle of finding the right codecs and 
apps? ArtistX comes with 2,500 multimedia 
tools, and Apodio will show you which do what. 
The Ubuntu Studio distro has tools for book 
publishing and editing raw images. You'll also 


find a variety of open source tools for education, 


such as UberMix, Skolelinux and Edubuntu. 
Since the mainstream distros strive to serve 
a variety of users, they run apps and allow 
connections on ports you'll never use. If you 
want a distro for security, try Network Security 


Toolkit. It bundles many of the tools in sectools. 


org’s Top 125 Security Tools list. There are 
several open source tools designed for digital 
forensics and penetration testing. The two best 





distros that give you access to the entire cache 
are CAINE Live CD and Kali Linux. The latter is 
the continuation of the BackTrack Linux distro. 

If you want to power your SOHO network 
with the best network server tools, Zentyal has 
all the components you need to run a gateway 
server, an office server and a communication 
server. It has got Apache web server, 
OpenLDAP directory server, BIND DNS server, 
Jabberd2 |M server, Zarafa groupware, Asterisk 
VoIP and DansGuardian. Looking to manage a 
RAID storage device? Check out the Debian- 
based OpenMediaVault. 

With the arrival of Steam, Linux has opened 
its doors to gamers, and Valve has released its 
own Debian-based distro called SteamOS. 








Do they strong-arm the user? 


A distro is more than just a collection of apps. !In fact, 

many of these top distros have the same 

applications. The one factor that defines a distro and 
separates it from its peers is its user experience. The top 
distros tested in this feature offer different user experiences, 
and these are influenced to a considerable extent by their 
default desktop environments. 


All the leading distros spend a considerable amount of 
effort on making sure their final product is a cohesive unit 
rather than a loose conglomeration of its parts. The top 
distros leave no stone unturned to deliver a polished product, 
and will include innovations such as custom artwork to help 
apps blend with the desktop, and tailored apps to better suit 
the workflow. 


developers have made sure the experience is consistent 
across all of them. However, we recommend the KDE desktop. 


Mageia 4 

Mageia is one of the best-assembled community distros. 
It has an expansive support infrastructure and very good 
documentation. Documentation is vital to using the distro 
because you need to understand its repository structure 
before fleshing it out with new apps. 

Like many desktop distros, Mageia displays a help screen 
after loading the desktop. But, unlike others, Mageia’s help 
screen is interactive, teaches you about the repos and gives 
you shortcuts to edit software sources. 

Mageia boasts intuitive custom tools with which to 
manage various aspects of the distro. One of the best is 
Mageia Control Center, which allows you to control and tweak 
everything. Mageia ships with several desktops, and the 








Ubuntu 13.10 


Getting started with Ubuntu should pose no issues to any 
user. The distro uses one of the best installers, and can be 
navigated easily to carve out space on your disk and set up 
a dual-boot system. 

Once you're inside the distro, it is a different story. Despite 
several years under its belt, Ubuntu’s Unity interface is still 
visually different from the desktop most users are familiar 
with. If you can look past your prejudice, however, the desktop 
is quite intuitive to navigate. Features that work well for the 
desktop include Ubuntu One data hosting and sharing service, 
Ubuntu Software Center and the messaging menu. This 
allows users to control their messaging status across various 
online services. These tools give the distro a usability edge 


over its peers. All said and done, Ubuntu is well put together 
with pleasantly integrated components. 
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Pre-installed apps How ready to use are they out of the box? 


All the top distros include the Mageia, Fedora and OpenSUSE; all of Mageia and Fedora’s DVDs offer the pecans 
usual selection of apps for these require you to add plugins and highest number of desktop Ubuntu 13.10 
everyday desktop use. You'll codecs manually post-installation. The = environments. As well as Gnome and 
find distro-agnostic apps such as Mint project produces separate editions KDE, they support Cinnamon, Mate, Linux Mint 16 
LibreOffice suite and Firefox, as well as of every release, with and without these Xfce and LXDE. Mageia offers Razor-qt Fedora 20 
other utilities and apps that are proprietary codecs. and Enlightenment. 
packaged with the respective desktop. All these distros support multiple While OpenSUSE has only Xfce and OpenSUSE 13.1 
Some distros require users to equip desktop environments in different live LXDE, besides KDE and Gnome, the 
browsers with plugins to play Flash CDs. However, none of the live CDs distro leads the others in terms of In terms of 
content, or install codecs to handle allow package selection. Ubuntu and flexibility during package selection. default 
; ae in é , ; ; ; packages, there 
multimedia files in a proprietary format. Mint produce only installable live CDs, You can fine-tune the package selection is very little to 
If you think that carrying out such tasks — while Mageia, OpenSUSE and Fedora and even choose individual packages choose between 


would be an annoyance, steer clear of 





have install-only DVDs. 


for installation. these distros. | 


Linux Mint 16 


Mint is everything that is good about Ubuntu and then some. 





disks. This is integrated into the context menu of Cinnamon’s 
Nemo file manager, along with the USB Image Writer tool. 


The distro takes the best tools from Ubuntu — including its 


installer - and combines them with a whole set of custom 


tools, such as its Cinnamon desktop. 


Cinnamon is based on Gnome 3, but retains the look and 
feel of Gnome 2. You will find all the familiar desktop furniture, 
including a panel at the bottom showing a list of open 
windows, and an applications menu in the bottom-left corner. 

Another cool tool is the Mint Software Manager (this pre- 
dates the Ubuntu Software Center and is just as slick). You 
can use the Software Manager to install the Steam client. 

Mint does a great job of integrating its various tools. For 
example, the latest release has a new tool for formatting USB 


Fedora 20 


Usability woes in Fedora start with the redesigned Anaconda 
installer. It has been tweaked in the past couple of releases, 
but it still lacks the consistency you'll find in other 


mainstream distribution installers. 


Out of the box, Fedora’s Gnome 3 desktop is still very 
bland and wears a deserted look. Unless users enable 
extensions, they have to grapple with some of its peculiarities, 
such as a missing bottom panel and the inability to place 


icons or folders on the desktop. 


The new paginated applications view isn't as effective as 
the categorised view that is adopted by its peers. 
Nonetheless, users will appreciate the single unified system 
Status area. The new headers on windows merge title bars 


OpenSUSE 13.1 


Like Fedora, OpenSUSE uses the RPM package manager. 


and toolbars into a single element, giving the distro a refined 
and consistent personality. 


a oe ee om a 


Interestingly, OpenSUSE is no longer just a KDE release; you 
can use either KDE or Gnome with the distro. 


However, in contrast, OpenSUSE is much more approachable. 


The installer isn't confusing and can be scaled up for 
advanced users, which is a definite plus. 

The OpenSUSE developers haven't tinkered much with the 
default KDE desktop. But, just like past releases, they have 
made sure that all apps are branded properly with OpenSUSE 
green, which gives a slick look to the desktop. 

While the distro's package management tool lacks the 
dress sense of Ubuntu’s Software Center and Mint’s Software 
Manager, its one-click install system steals the show. 

OpenSUSE comes with the comprehensive YaST 
configuration tool, although it could do with a little polish. 














Package management When you need to flesh out the distro 


While a distro will ship with 

a number of apps, sooner or 

later you will need to call in the 
services of the distro’s package 
management system. 

Ubuntu’s Software Centre is one of 
the best tools for fleshing out the distro. 
By default, it lists only packages in 
official repos. Use the Software & 
Updates tool to add and remove repos 
and control how the package manager 
handles updates. Mint’s Software 
Manager is visually different, but offers 


similar options. The distro includes the 
homegrown MintSources tool for 
managing software sources. There is 
also the Synaptic package manager. 
Mageia’s software management tool 
is very usable. It isn't as pretty as the 
alternatives, but is very functional and 
intuitive enough. Mageia has a tool to 
enable repositories and mirrors as well. 
Besides a functional software 
management tool, the best thing about 
OpenSUSE's package management 
system is the One Click Install system. 


In earlier reviews, we have been 
critical of Fedora’s graphical package 
management app. However, the latest 
release of the distro ships with Gnome 
Software, which is a distro-neutral 
software management app. The app is 
still under development and provides 
limited functionality. Package 
management will be in a state of flux in 
the next Fedora releases, as the 
distribution is migrating to the DNF 
package management system; this is 
the successor to Yum. 


Mageia 4 
Ubuntu 13.10 
Linux Mint 16 
Fedora 20 


OpenSUSE 13.1 


Thanks to 
OpenSUSE’s 
One Click Install 
system, package 
management is 
newbie-proof. 





How tweakable are the distros? 


Some distros have 

expansive sets of controls 

that can help customise 

just about everything. 
Then there are distros that ship with 
just enough options, so the user 
doesn't feel overwhelmed. 

A standard Ubuntu installation 
doesn't offer as many system settings 
as its peers. However, you can carry 
out minor tweaks to the Unity desktop 
such as changing the wallpaper. If you 
want more control, you'll need to grab 
a third-party tool such as Ubuntu 
Tweak or Unity Tweak Tool. 

Linux Mint 16 bundles its own 
custom settings tool, that can be used 
to influence the appearance of the 
desktop and tweak compositing 
effects. Some elements of the settings 
tool are similar to Ubuntu’s. The one 
major difference is the Device Drivers 
option. This utilises a tweaked user 
interface to enable users to make an 
informed decision about which drivers 
to use for their devices. 

Fedora doesn't have a settings 
panel, and relies on the one that ships 
with Gnome. The Gnome settings 


panel isn't so different from Ubuntu’s in 
terms of configuration, including the 
ability to sign in to online accounts such 
as Google Docs and Facebook. 

Yast handles OpenSUSE’s 
configuration. It caters for desktop 
users as well as advanced Linux 
admins. The tool allows users to tweak 
all of the settings for a normal desktop, 
configure the bootloader and firewall, 
manage users, set up the network, tune 
security settings and set up system 
services. It can be used to transform an 





OpenSUSE installation into a Samba 
server, an Apache web server and more. 
It also doubles as the package manager. 
Mageia offers a similar number of 
configuration tools. Its custom control 
centre has modules for managing 
software, hardware peripherals and 
system services. Advanced users can 
employ it to share internet, set up 
a VPN and configure network shares. 
Mageia and OpenSUSE get 
additional configuration options, thanks 
to the KDE Control Centre. 


Yast is a 
very versatile 
configuration 
utility, but could 
do with a faceli?* 
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Mageia and 
OpenSUSE have 
no dearth of 
configuration 
tools available. 





Do they look appealing’? 


The oft-overlooked area of 
the Linux ecosystem, the 
desktop environment, 
came into the limelight 
around 2011. Suddenly, dramatic new 
desktop versions were introduced that 
overruled the existing ones. The 
community ranted and raged, users 
ditched their favourite distros and 
forks began to emerge overnight. 

Several years later, the situation 
has calmed. Desktops are now more 
usable than ever and new, stable, ones 
have entered the mainstream. 

All the top distros now offer 
polished versions of multiple 
desktops. Ubuntu is something of 
an exception in that it offers non-Unity 


desktops as officially-supported spins. 
Unlike Gnome, KDE, Xfce, Cinnamon 
and Mate, you won't find the Unity 
desktop present on any other distro 
besides Ubuntu. 

Like its revolutionary peers, 
Ubuntu’s Unity has come a long way in 
the past couple of years. However, 
despite its numerous usability 
improvements, the desktop still looks 
different and disorientating to new 
users. That said, it is well put together 
and is integrated nicely into Ubuntu. 

In many respects, Gnome is Fedora’s 
flagship desktop. Yet Gnome is still very 
bland and as much of a shock to the 
senses as Unity. Users will need to 
spend some time playing around with 





its extensions to make the desktop 
work for them. 

On the other hand, you have Mageia 
and OpenSUSE; the new version of their 
KDE desktop had a head start on Unity 
and Gnome. But that desktop suffers 
from a different kind of problem. Its 
users are faced with a daunting 
challenge of comprehending its 
revolutionary features and then 
tweaking them as per their 
requirements. Some of the features 
aren't very intuitive to comprehend and 
configure, which means that many 
users miss out on its goodness. 

If you want a familiar-looking 
desktop, Mint’s Cinnamon retains the 
workflow that users are familiar with. 


Mageia 4 
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Unity and 
Gnome are 
usable, but not 
everybody’s cup 
of tea. 


For PCs past their prime. 


Bodhi Linux 


The distro uses the lightweight and 
pleasing Enlightenment desktop 
environment. Enlightenment offers a 
number of different profiles, including 
Bare, Laptop and Fancy, each of which 
is optimised for different types of 
hardware configuration. 

The distro ships with a very minimal 
set of apps, which are primarily 
borrowed from the LXDE environment. 
These include the Leafpad text editor 


and PCManFM file manager, but you 
can add more apps to these with 
Bodhi's AppCenter. This innovative 
web-based software installation tool 
enables you to download packages on 
any distro and then bring them over to 
Bodhi for installation. 

Bodhi Linux is based on Ubuntu and 
employs its easy-to-use installer, while 
offering lots of end-user documentation 
on its website. 








Lubuntu 


If you want Ubuntu goodness on an 
underpowered computer, check out 
Lubuntu — which is built around the 
lightweight LXDE desktop. 

Unlike Bodhi, Lubuntu is chock-full 
of apps. It’s got some GTK apps, such 
as the Evince document viewer, Archive 
Manager and mtPaint image editor, 
along with feature-rich apps that go 
with its LXDE desktop, such as the 
Leafpad text editor and PCManFM file 


manager. Lubuntu has the Sy/pheed 
email client, as well as the Chromium 
web browser. It has also got Audacious 
and Gnome Mplayer, which allow you to 
play audio and visual files. The distro 
comes, too, with word processing 
software AbiWord and the spreadsheet 
app Gnumeric. 

For package management, the 
distro uses its own lightweight version 
of the Ubuntu Software Centre, called 
the Lubuntu Software Centre. 








Puppy Linux 
Puppy Linux uses one of the lightest 
window managers (JWM). While it isn’t 


editing and creating multimedia. Using 
its custom apps, you can block website 
ads, grab podcasts, burn optical media 


the prettiest to look at, it is fully 
functional and comes with minuscule 
hardware requirements. 

The distro is popular for its 
collection of software and custom apps. 
lt has apps for graphics and 
productivity, as well as for playing back, 


Verdict 


and a lot more. 

The distro is available in a variety of 
different flavours. The WaryPuppy 
edition uses an older kernel and 
includes additional drivers to support 
peripherals such as dial-up modems, 
while RacyPuppy uses a newer kernel. 
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Depending on the age of your 
computer, you could revive it with any 
of these three distros. Lubuntu is 
a good option for machines that are about half 
a decade old, with a single core and upwards of 
512MB of RAM. Application launches won't be 
the fastest, but you'll have the satisfaction of 
resuscitating your old workhorse. 
Bodhi Linux, with its Enlightenment 
desktop, is an elegant blend of eye candy, 
a Stable base and a well-designed package 


management system. However, you will need 
to spend some time with the package manager 
to prep the system. 

The distro that is top dog when it comes to 
older hardware is Puppy Linux. There is also no 
rival to the distro’s default software collection. 
Unless you want a particular piece of software, 
it will be quite a while before you fire up its 
package management system. 

The weakest part of the distro is its installer, 
which doesn't have an automatic partitioner; 


instead, it fires up Gparted for you to manually 
partition the disk. Having said that, each step 
in the installer is very well documented within 
the installer itself. 

The distro has an impressive support 
infrastructure; it has two independent and very 
active forum boards, as well as loads of 
documentation on getting started. The distro 
also bundles help documentation on several 
topics, including advice on working with 
Microsoft Office files. 





For the hard-core power user. 


Arch 


Arch is one of the most loved options 
for advanced users who want to set 
up their own customised distro. 


packages are downloaded off the web. 
The installation itself will introduce you 
to a range of configuration files that 
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While most distros provide a pre- 
packed set of apps and 
configurations, Arch lets you design 
your installation from the ground up. 
Arch can take a long time to get 
going, depending on the number of 
packages you wish to install. All 


must be set by hand. Absolutely 
everything must be done manually. 

The most impressive feature of the 
Arch distro is Pacman, its bespoke 
package management tool. Arch is a 
rolling release that can be brought up to 
date with a single command. 
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Gentoo 
Along with Arch, Gentoo is one of the 
most configurable distros. With it, 
users get pervasive control in building 
the system from the ground up. 
Gentoo is a rolling release that, unlike 
Arch or any other distro, insists you 
inspect the kernel during installation 
and streamline it by removing 
features you don't need. 

This distro packs an awesome 
package management system, called 


Portage. Portage introduces you to 
Linux internals and several new 
technologies native to Gentoo, such as 
the USE flags system. The USE flags 
system can be used to define the 
features you want a package to support. 
If you've never used it before, there's 
a steep learning curve to using Gentoo. 
Derivatives such as Funtoo can be 
a good starting point if you're not ready 
to start struggling with Gentoo. 
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Debian 
Because of its stability, Debian is 
considered to be the best distro for 
rolling out servers. The distro is also 
the desktop of choice for power users. 
One of the best things about 
Debian is its adaptable installer, which 
enables users to control which Linux 
kernel modules to load. After the core 
packages are installed, you get to 
configure the package manager and 
can install additional sets of pre- 
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defined packages to turn the system 
into a web server, print server, mail 
server and more. 

Debian can run on many different 
architectures. Thanks to older, 
thoroughly tested, stable packages, the 
distro is extremely secure. It ships with 
no proprietary drivers or codecs, but 
almost every software vendor provides 
pre-packaged binaries for Debian, 
making app installation a breeze. 
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This is an overview of your currently configured partitions and mount points. Select a partition to modify its settings 
(file system, mount point, etc.), a free space to create partitions, or a device to initialize its partition table. 


Guided partitioning 
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Control and flexibility are the 
hallmarks of distros intended for 
power users. If you are already 
a power user, chances are you are already 
using one of these three distros. 

Compared to Arch and Gentoo, Debian 
provides a much larger number of binary 
packages and is available on a wider selection 
of architectures. Debian is an ideal starting 
point for would-be power users. It provides 
a solid, stable system and gives users a good 


idea about how configurable and flexible 
a Linux system can be. 

Since Arch and Gentoo do not provide any 
default packages, they offer much greater 
control to users and allow them to design 
a system as per their liking. However, there are 
other similarities between Arch and Gentoo. 
For starters, they are both source-based 
distros that have intricate set-up processes. 
As they both have rolling releases, their 
packages are available shortly after being 


released upstream. If you consider the level of 
control a distro offers to the users, then Gentoo 
cannot be beaten because it allows you to 
tweak everything, from the kernel up. 

Gentoo builds the system according to 
a user-specified USE flag, while Arch provides 
a ports-like system for building packages from 
source, and is designed to be installed as a pre- 
built binary. Arch is, therefore, quicker to set 
up, while Gentoo is more customisable and 
much faster. 


Star distros. 


Ubuntu — the distro that made Linux a household 

name — has recently been on a decline. Kudos to 

Canonical for trying to be disruptive and change 

the status quo with the distro, but the jury's still 
out on Ubuntu’s Unity interface, which is now key to 
Canonical’s multi-device strategy. 

The distro is more than just a single product, and rather 
an ecosystem that is made of both online services and 
desktop software. But, as new features are added and existing 
ones are polished in an effort to integrate the local desktop 
with the web, it continues to alienate itself from privacy- 
CONSCIOUS USEers. 

Fedora loses out for very different reasons. The distro has 
got too much going on, but this is to be expected of a distro 
that doubles up as a test bed for newer, bleeding-edge 
features. While it has got a new installer, its revolutionary 
default desktop is not on friendly terms with a majority of the 
community. Other changes to the core infrastructure, such as 
package management, have already been announced for the 
coming releases. 

There is nothing inherently wrong with Fedora’s closest 
RPM-based rival, OpenSUSE. But after weighing up all its 
features, we feel the distro works better on the business 
desktop. Many of the distro’s features, such as its support for 


Mageia 


Mageia does an all-round excellent job of showcasing 
the best the FOSS community has to offer. 


Linux Mint 


There isn’t anything wrong with the distro, except for the fact 


that it doesn’t officially support other desktops. 


OpenSUSE 


This distro is better suited to a business desktop rather than 


a home PC. See our guide on page 68. 


Besides the distros we've covered in this 
feature, there are several others that cater to 
the average desktop user. If you like Fedora, 
you'll love Korora. This distro uses the latest 
Fedora release and adds codecs, plugins and 
a bunch of apps to make it more usable out of 
the box than Fedora. 


If you like the idea of Mageia, you'll 
probably also like PCLinuxOS, ROSA 
Desktop Fresh and the recently-released 
OpenMandriva distro. 

Another favourite is Sabayon, which aims 
to give regular desktop users a taste of the 
Gentoo distro, while the Arch-based Manjaro 
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Recently Used Applications Main options 


User access 


All users 


Time control 


Mageia is an 
ideal distro for 
home users. 


directory servers, will be wasted on the home desktop. Even 
its One Click Install system doesn't offer any real advantage 
for installing individual apps. 

This leaves us with Linux Mint and Mageia; in our opinion, 
these are the top two desktop distros. Linux Mint is essentially 
a one-man effort and cannot match the resources and 
manpower of the experienced community of developers that 
powers Mageia. The best thing about Mint is the Cinnamon 
desktop, and this has fuelled its meteoric rise. Cinnamon is no 
longer exclusive to Mint, and is offered by Mageia as well. 

Mageia lacks some of Mint’s excellent custom tools, but 
the distro has very useful and mature alternatives of its own. 
Consider the robust organisation and rock-solid infrastructure 
that powers and supports Mageia and you have a distro that’s 
all set to rule the distro charts. 





Fedora 


Fedora is in a state of flux, with key pieces of software still 
under development. See a user’s viewpoint on page 10. 


Ubuntu 


Ubuntu will reclaim its top spot if its multi-device 
strategy pans out with Unity at its heart. 


is aimed at the advanced user. Chakra Linux is 
usually one of the first distros to roll out the 
newest KDE releases. 

However, if you are looking for a distro to 
recommend to someone who is just starting 
to get into Linux, take a look at PinguyOS and 
Zorin OS. BS 





Freakyclown 








rackspace 


Les Pounder talks to enigmatic hacker Freakyclown about the future 
of online security in a world where every click is under surveillance. 


The world of hacking 
is a Shady place full 
of secrets and lies, 
but in recent years 
this world has been 
dragged by the 
scruff of the neck 
into the media 
spotlight through the likes of WikiLeaks, 
the Snowden files and high-profile hacks 
on major corporations by clandestine 
groups. But hacking is as old as technology 
itself and not all hackers are malicious. 
Recently we met Freakyclown, a hacker and 
penetration tester who works to make the 
world a safer place, one client at a time. 
Freakyclown is a rare type of person; 
while he protects his real identity, he’s 
content to speak in public about his 
profession, and he’s become a popular 
speaker at UK events. He’s also a 
keen supporter of the Raspberry 
Pi Foundation and its mission. 





LXF: You’re quite an enigmatic 
celebrity in the unconference and 
events world. Can you tell us a little 
about your history? 
Freakyclown: Well, I'm originally 
from Essex and | grew up pretty poor, but 
thanks to my mates, who are more like 
brothers to me, we kept a tight-knit group that 
got us all through the hard times. 

| got into computing pretty young. My first 
computer was a Binatone dual paddle game 
system with analogue controllers and metal 
toggle switches to select Tennis or Pong and 
so on. | went through a couple of machines 
including an Atari 2600, my best mate Lee still 
has his wood-faced one! Then | got an Amstrad 
CPC464, which was my first real computer 
with a keyboard, and that got me into a little 
programming. Eventually | traded in my 
Amstrad for a Commodore 64 and then finally 
upgraded to the Amiga 500 and 1200, which is 
when computing really took off for me. | started 
hitting bulletin boards and other dial-up places. 

lt was around this time | started hanging 
out with 2600 hacking groups. Before long | 
Started going along to their London meetings 
and making friends, but most importantly the 
group gave me a huge help in learning things. 
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Skip forward a fair few years later and I’m 
now working as a professional hacker or 
penetration tester (pentester). 


LXF: Was there an event in your life that 
triggered your interest in hacking? 

FC: | don't think becoming a hacker is 
something that is triggered by an event. It’s a 
mindset and a way of life you are born with — 

a thirst to want to understand and change 
things. | don’t think there was a key moment 
where | suddenly exclaimed “Eureka!” and went 
off to learn hacking. | believe it grew out of an 
innate need to learn not only how stuff worked, 
but how to make it do what | wanted it to do. 
Sure, it’s fun to sit and play videogames but 
there is nothing like the feeling of making one 
yourself no matter how crude and simple it 
may be. This mindset helps when testing 
networks, web applications, binary applications 


ON THE PERCEPTION OF HACKERS 
“People think you need to be 
an ex-Criminal to do the job 
we do, but that isn’t true.” 


and building security. We come at them from a 
completely different angle to the end user and 
the developer. When pointing out security flaws 
| often get told “| would never have noticed 
that,” or “| wouldn't have imagined doing that.” 
This comes from a lifetime of looking at things 
ina completely different way. A lot of people 
think that you need to be part-criminal or an 
ex-criminal to do the job we do, but that isn’t 
true at all. In fact, it would mean you would 
almost never get a job like this — it’s like saying 
that a policeman would need to be a criminal 
to catch them. It’s all about the mindset. 


LXF: You work for a company called 
Portcullis Security — can you tell us a little 
about the work that you do for it? 

FC: Portcullis is one of the largest computer 
security firms in the UK. It has been going 
since 1986 and has about 40 pentesters. Most 
of the work that | do is web application testing 
and network testing. We have specialists in 
almost every field from iOS phone testers 
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through to criminal forensics. We are very 
active at releasing new tools and blog posts 
to the world via our own dedicated labs site 
(http://labs.portcullis.co.uk). When |'m not 
doing ‘normal’ pentest, work | get to indulge in 
my speciality — social engineering! 


LXF: So what is social engineering? 

FC: Social engineering is basically convincing 
people to provide you with information or 
access to places they shouldn't. Although this 
does include things people may have heard of, 
such as email phishing attacks, we use social 
engineering to test the physical security of 
buildings ranging from small offices through 

to banks and more secure places that | can't 
mention. I've been doing this type of testing 

for many years and have a 100% success rate 
getting into every target I’ve been given. I’m not 
sure whether this means I’m great at my job, 
or that across the board people 

do physical security really badly. 

| spend a lot of time trying to 
convince people that it’s a very 
important aspect of IT security. 
Many times | have gone against a 
firm that have spent millions of 
pounds on their network security 
only to rock up and walk into their 
building and remove the computers that they 
have worked so hard to protect. | have literally 
thousands of stories of interesting events and 
Situations that | have gotten into doing social 
engineering testings and | am slowly writing a 
small book of them, readers that are interested » 
in that should hit me up on Twitter or IRC to 
encourage me along with that, cause | need the 
motivation to finish it up. 


LXF: Have you ever come across security 
issues in a service or product that have 
forced you to reconsider using it yourself? 
FC: Oh yeah, | hear of loads of things that 
concern me and make me want to stop using 
some products or services. |’ve heard of 
everything from those NFC-enabled bank 
cards (which | love to do a live demonstration 
with during my talks, illustrating how easy 
they are to steal data from), through to whole 
companies whose networks | know are 
insecure, and | fear for my own personal data! 
I'm sure someone with a normal mental 
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attitude wouldn't sleep well at night. 


One sneaky trick to help people track who's 


selling their information is to sign up to 


Google and then give + emails to companies. 
For example, MrFoo@gmail.com can use 
MrFoo+ElectricCo@gmail.com for the electric 
company and it will come through to MrFoo@ 


gmail.com and you can separate 
out emails easier, but if a gas 
company starts emailing you on 
MrFoo+ElectricCo@gmail.com 
then you know who passed it on, 
which makes it easier to block 
and report spam. 


LXF: As part of your presentation for 


various events, you introduce yourself via 
a series of quick slides. Have you had any 
brushes with the law, and if so, how do they 


perceive a ‘hacker’? 
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FC: Well, there was this one time when | got 
arrested for the CMA (Computer Misuse Act) 
Section 3, which got a little out of hand to be 
honest, but the law saw sense after many, 
many months of me agonising and waiting 


until the bail case was finally dropped! 


ON BRUSHES WITH THE LAW 


| “The bank was surrounded 
by police, and I had to explain 
| and prove I was a good guy.” 


| was undertaking a social engineering job. 

It was about 2am or 3am and | was scoping 
out this building for weaknesses ready for the 
next morning. | wanted to see what ways | 
could infiltrate this massively secure building. 
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Another funny moment was in London, when 


_ Freakyclown 






Suddenly | heard a cough from behind me 
and someone asked me what | was doing. 
Obviously being sleep deprived and focused 
on the task at hand, | casually said “Trying 
to work out how to break into this bank 
tomorrow”: It was then that | realised that 
two coppers were standing there staring at 
me in disbelief. That took 
some explaining! A third time 
involved a social engineering 
test against a high street bank 
that suddenly took a turn for 
the worse when the bank was 
Surrounded by police and | had 
to spend a fair amount of time 
explaining and proving that | was a good guy! 
But to answer the question, the average 
policeman doesn't seem to understand 
hacking, in much the same way that the 
general public don’t (they are normal human >> 
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Freakyclown 


beings remember!) and frankly it is not their 
job to. It’s the job of the courts and judges to 
understand and interpret the very grey guides 
given in laws and hopefully see sense in it all. 


LXF: Your talks are always very popular and 
you draw quite a crowd — what do you think 
attracts people to them? 

FC: | genuinely have no idea why people 

even come along, let alone why | get invited 

to headline at events, but I've been told its a 
combination of scaring the audience as well as 
making them laugh. | get the biggest range of 
reactions to my talks, from people asking for 
Signed stuff through to people crying at the 
Subject matter that has upset them. | like to 
make my talks a mix of simple explanations 

of complex subjects and super technical 
explanations to make sure that everyone who 
comes along can take something away from 
them. If | can get across the actual reason why 
people should use secure passwords or not 
post their photos on Facebook, and they can 
explain that to their friends in a way that isn't 
technical, but they can give the real world 


reasons, then | think a talk has been successful. 


LXF: The actions of Edward Snowden, and 
his release of top secret documents to 
media and other websites have given him a 
pseudo-celebrity status. Should an action 
such as this be celebrated? 


FC: | know | am going to get some flack for this, 
but | think Snowden should be tried as a traitor. 


He took a job for the NSA and then years later 
grew a conscience? Oh please, you don’t 
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become a vet and not expect to be putting 
fluffy kittens down, and then cry about it to the 
papers that other vets are doing the same. The 
agency he worked for has a job to do and 
should be allowed to do it! Honestly, nothing he 
has released has been mind-blowing or at least 
not suspected. The only fact that we've learned 
is that the NSA is terrible at presentations! 

The mass media like to make things appear 
a thousand times worse than they actually are, 
and yes, they will moan about the way that 
certain secret agencies act, but they only see 
one side of things. There are many decisions 
and actions to be done in order to protect the 
way of life that we have, and they aren't always 
pleasant. As Spock once said, “The needs of 
the many outweigh the needs of the few.’ 


LXF: We've heard many stories about the 
NSA spying on and monitoring civilians’ 
communications. What is your take on this? 
FC: The clue is in the name. Throughout 
history, mankind have spied on each other — it 
is the way of the world and will not change! As | 
already said, we need these agencies in order 
to enjoy the freedom and liberties that we have. 
| have no issue with the way they do things — in 
fact | salivate about the awesome technologies 
they are involved with, and the projects that the 
general public have no idea about. Just read 
the history of Menwith Hill! 


LXF: How is Menwith Hill related to hacking, 
and what technologies have been used or 
created there that are now commonplace? 
FC: Well, Menwith Hill is a small hub in the 
worldwide Echelon system run 
jointly by the UK, USA, New 
Zealand, Australia and Canada. 
It’s been around since the 
1960s and is used to sniff 
traffic, then the data is given to 
other agencies. That's because 
it’s illegal to Snoop on your 
own country, but not on 
each other's. Menwith came 
onto people's radar (no pun 
intended), when documents 
brought out in a trial in the 
1990s showed that it had 
fibre lines from the UK phone 
trunks capable of handling 
100,000 concurrent phone 
lines. People used to think it was 
all conspiracy theory stuff until 
Snowden started releasing 
documents and now it’s coming 
~ back into the public's mind. 


LXF: What’s your definition of 
the term ‘hacker’? 

FC: | grew up when hacking was 
the old school term, meaning if 
you use something in a way it’s 
not designed for, it’s technically 
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hacking, or if you cobble something together to 
enable you to use something in a way it wasn't 
designed to be used, then that’s hacking. 
However, nowadays it is more generally meant 
for computer-based stuff. The mass media 
have totally ruined the word, and | urge the 
geek community to try and steal it back and 
reclaim it for its original intention. 

| helped start the Surrey and Hampshire 
Hackspace (http://sh-hackspace.org.uk), 
and it’s not about hacking computers in the 
sense of breaking into computer systems. We 
do everything from wool-spinning through to 
robots. Some people think we should be called 
a makerspace, but | love that we have stuck to 
the old ways and are known as a hackspace. 


LXF: Tor has been seen as the best way to 
stay anonymous online, but there are reports 
that it’s been compromised by government 
agencies. Are we seeing an increase in 
surveillance at the expense of liberty? 

FC: Never ever rely on a single point to remain 
anonymous. Tor’s logo is an onion for a reason. 
Use Tor, for sure, but use it like a skin of an 
onion — layers upon layers upon layers. 
Encryption is another thing people do badly 
but depending what you want to do take the 
appropriate measurements. You don't need to 
fly to Thailand and use a stolen laptop with 
Stolen Wi-Fi from a nearby cafe to browse the 
secret wiki on the undernet, but if you are 
probing NASA servers for proof of aliens, don't 
do that from your parents’ house! 


LXF: Are we moving blindly towards a 
controlled internet, where organisations can 
lock content? For example, ISPs blocking 
torrent sites due to illegal file sharing? 

FC: No not blindly. We have always had this, 
and people thinking otherwise are just not 
informed enough. Deep packet inspection and 
QoS have always been available to even the 
most basic networks. If you don't like what's 
being blocked, there is always a way around it. 
Again, we need to protect the innocent, like 
kids with bad parents, from seeing stuff that’s 
not appropriate. The people that moan about 
things being blocked by default generally 
have the technical knowhow to bypass them 
and assume that the general public want 

the access they need, in much the same way 
that people assume the speed limit should 

be raised, when most people cant drive safely 
at 15mph in a car park. We have to protect 
the masses from themselves not for the few 
Michael Schumachers and geek wizards. 


[LXF: The Internet of Things is slowly 
becoming a reality. Recently fridges were 
found to be part of a botnet sending 
750,000 spam emails. Do we really need to 
have every device on the internet? And if 
so, how can we reduce the chance that our 
fridges become part of Skynet? 








FC: Until IPv6 finally takes off, | can't ever 
imagine that everything will be connected. 

Nor do | worry that Skynet will be made 

from fridges! There's a fantastic film called 
Maximum Overdrive (1986) where all the 
computer-controlled devices on Earth start to 
turn on people and kill them, maybe this is 
more of the future than /Jerminator style wars. 
Computers are extremely fickle. | can't imagine 
Skynet running for more than two weeks 
without needing a reboot due to an update 
being required. 


XF: Google has bought quite a lot of 
interesting companies lately, including the 
rebotics company Boston Dynamics and, 
more recently, Nest, the remote-controlled 
central heating project. With its purchase of 
Nest, are we looking at a potential security 
risk to life and liberty? 

FC: | think Google gets a lot more flack than 

it deserves. Google is not military funded, and 
nor is it doing R&D on behalf of the military. 
Google just has too much money and is trying 
to find the next big thing. People love to hate 
on success. In the 1980s and 1990s everyone 
hated Microsoft; now everyone hates Google, 
Facebook and Flappy Bird. 


*: How can users stay safe online? 

FC: Trust no one. Make sure you've installed 
every update you're asked to install (after 
checking its authentic). Run a decent free 
antivirus solution. Make sure that you actually 
understand the risks. | suspect the average 
reader of this magazine is more sawvy than 
most, so | ask the dear readers to teach others 
some basics that they already know. 






XF: Devices such as the 
Raspberry Pi and Arduino have 
made tinkering and hacking more 
accessible for learners. Have you 
come across any nefarious uses 
for these devices? 

FC: Yeah, in fact I've created a few 
myself. One is a VoIP phone that has a 
Raspberry Pi embedded into it. The host 
phone provides the hidden Pi with an Ethernet 
network connection to the target’s network. 
The Pi also creates a wireless access point, so 
it can be left plugged into a target’s network 
and work as a VoIP phone, but allow attackers 
to wirelessly attack their network. 





LXF: On the subject of nefarious devices, 
what’s your take on the use of drones? 
With kit being easily available online, are 
we risking our privacy? 

FC: Like all new technology there's always 
going to be a risk that it could be used for 
harm as well as good. | mean, how long until 
we see someone attach a grenade to a drone 
and swoop in on Justin Bieber concert, or fly 
over military bases to snoop for secrets? 





XF: There are many user groups and 
hackspaces starting up around the world. 
What would be your advice to a group, and 
what lessons did you learn along the way? 
FC: Let's first clear up for the readers that we 
are talking about spaces where people can 
learn things such as electronics, weaving, 
woodwork, and any other skills the members 
may have. They get to build 3D printers, use 
lathes, drills and sometimes some computer 
stuff happens. A hackspace is not a place you 
would go to learn illegal ‘hacking’ skills. 

As | mentioned, | helped start the Surrey 
and Hampshire Hackspace in Farnborough, so 





i maakt imagir ne aad 
running for more than two 
weeks without a reboot.” 


| have some experience of what it’s like to need 
and then start a hackspace. | would suggest 
you have a really good look around first. There 
might already be a hackspace in your area. If 
like me, you find there isn't one, then it’s best to 
Start off small. Start with simple meetings in a 
local pub or coffee shop to make sure you get 
the core people in place. It’s this core that will 
see you through the next few years until you 
get your first space. Take baby steps. We did 
pub meetings, then found pubs that let us use 
the back room for free, and then moved on 
from there. We're always available on IRC on 
freenode #sh-hackspace if anyone wants to 
come and ask for more advice. 

LXF: If anyone is interested in a future 

secu or hacking career, what advice 
would you give them? 
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FC: Learn the basics. Make sure you know the 
fundamental ways things work — networking, 
code, packets and wires and so on — because 
only when you understand the fundamentals 
can you start to work out how to build on these 
things and then start to make them behave 

in ways to your advantage. If you are young 
and looking at college or university, then try to 
get onto a course that covers as much stuff 
as possible rather than focused on one area. 
Pentesting requires not only the correct 
mindset but also having a broad knowledge. 

If you are older or already have a job so can't 
get on a full-time course, your best bet is to 
look at getting a certification. In 
the UK you should check out Crest 
or Tiger Scheme as these are well 
known and the industry will look 
favourably on people that have 
gotten those certificates above, 
say, a CCNA or MS cert. There 
are also many free tutorials out 
there, and there are loads of 
downloadable live CDs that have tools and 
applications to help you learn, such as Kali 
Linux, Black Arch and then you have live CDs 
for setting up testing labs, such as WebGoat 
and DamnVulnerable Web App. Remember: 

if you don’t have permission, you shouldn't 

be touching it or you will end up in trouble 
and that will ruin any chance of getting a job. 


LXF: Are there any hacks committed by 
other hackers that you wish you had done? 
If so, which and why? 

FC: [laughs] I’m not sure | would want to have 
done any because they generally got caught, 
but | think Gary McKinnon’s was the most 
interesting one to me due to my interest in 
UFOs. The trouble is, having briefly met him at 
a conference, | don’t believe a word of what he 
Says he saw. 
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3D printing on Linux 
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into the 
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is available for us Linux users? 


s we all know, 3D printing has 

taken off and is now available 

to home users and 

enthusiasts — albeit ones with 
exceptionally deep pockets. However, 
despite the press frenzy on 3D printing, 
there appears to be a distinct lack of 
attention towards the poor operating 
system behind the printer. This is a 
shame, and so we'd like to make amends 
and see what we can do to bring Linux 
into the 3D printing world. 

More specifically, we are going to go the 
extra mile by building ourselves a 3D printer 
from a kit. We'll see what's necessary to get 
the printer running under Linux, what 
software Is needed and how it all connects 
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up and works. We'll also pass on a selection 
of tips to help you out if you decide to take 
the plunge into this brave new world of 

3D printing. 


Choose your weapon 


To begin with, you'll have to find a suitable 
3D printer that runs and talks happily to 
Linux. Naturally, not every 3D printer is 
created equally — some may offer the lure of 
being primed and ready to go in a matter of 
minutes, but their drivers and 
accompanying control software may not be 
compatible with Linux. The UP Plus 2 is one 
such model: it is brilliantly devised, 
beautifully designed and extraordinarily 
easy to get up and running, but 
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unfortunately it is compatible only with 
Windows and Mac. 

A lot of the 3D printers that come in kit 
form, such as the RepRap family and 
Velleman, follow the open source route to 
some degree, and will therefore work quite 
happily under most Linux distros. In our 
tests here, we opted for the Velleman 
K8200 because it’s a mechanical marvel of 
a device and very open when it comes to 
operating systems. 

The next issue at hand is the software 
that will be communicating with the printer. 
In most cases, the printer manufacturer will 
recommend a particular package, or set of 
packages, that will work best with their 
device. The reasons are simple: the majority 
of 3D printers — particularly kit form devices 
— come in different sizes and with various 
printing parameters. The print bed, or 
platform, of one printer will probably be a 
different size to another, as will the range of 
the X, Y and Z axes. In some instances, this 
presents a slight problem, but in most cases 
it is remedied easily with the help of pre- 
defined profiles. 

It’s worth noting that the software needs 
to be able to communicate with the printer, 
and has to have the ability to manipulate 
and control its motors and heated elements. 
As well as this, it has to be able to import 
any given number of 3D models, and slice 
them so that they can be sent to the printer. 
The slicing part of the process can reveal 
the G-code, or G programming language, 
which tells the printer what to do, and how 
to do it. 

By revealing the G-code, it is possible to 
modify further the parameters of the printer 
and the print job, and tweak as necessary. 
For example, the temperatures of the 












As we said, there is a certain during the printing process. print onto the bed first, before 
















element of trial and error Having a section of the print printing the object on top. This 

involved with 3D printing. cool too quickly can cause increases the adhesion and can 

Following these tips should curling or warping. This will ruin stop curling. It can be tricky to 

help you to get a more the print, and cost youinterms remove the raft from your 

successful print: of filament, energy and time. design, but there are videos 

@ Make sure the print bed is @ Pre-heating the print bed is online that help explain how to 

perfectly flat and ensure that an absolute must, although do it. 

the nozzle is the same height most printers will do this @ Should you use PLA or ABS? 

across the entire bed (all four automatically. It’s often bestto Both of these printing 

corners and the centre). get the bed up to around 50°C si materials have different 

Usually, 0.25mm is the for polylactic acid (PLA), properties and operational 

recommended height — which whereas acrylonitrile butadiene temperatures. In general 

also happens to be the styrene (ABS) requires a little terms, PLA is used most 

thickness of a standard more heat. commonly for household and 

greetings card — using one as @ Incorporating araftinto your hobby projects, but it’s worth 

a gauge certainly helps. design will save you a lot of investigating both >» Some users have found that placing a 
@ Cut out any draughts that wasted prints. A raft is a layer thermoplastics to see which mirror over the print bed is the ideal way 













may be blowing over the print of filament that the printer will | one suits your needs best. to ensure that it’s flat. 




















































heated print bed can be altered, the fan 
Speed can be controlled and any 
temperature differences from the extruder 
nozzle (the bit where the melted plastic 
comes out) can be enhanced to produce a 
better — or more successful — print from 
your object. 

Finally, the printer software needs to be 
able to align the imported model, or allow 
you to fine-tune and manipulate the object 
on-screen so it can be printed out correctly 
by your printer. For example, if a pyramid 
design was loaded or imported with the 
apex pointing down, you would need to be 
able to rotate the design the right way up 
within the software. This would ensure that 
the design could be printed accurately. 

Thankfully, most 3D printer control materials and time, which will ultimately 
software does all of the above. Some may mean an overall saving of money. Most 3D 
do one aspect better than others, or some The Velleman K8200 is a good kit project modelling programs already come with the 
might automate the process more cede el RB el) tools necessary to allow you to create 
effectively, but generally most will offer all hollow objects, and some even do this 
the basics. For this article, we used the automatically for you. 
excellent Repetier-Host software. As well as Bear in mind that a hollow object isn’t as 
being able to create a 3D model from strong as a Solid object, and some designs 
scratch, it does everything we've already may need an elaborate raft designed into 
mentioned to near-perfection. You can them before they can print successfully. 


program. These are ‘Creating Hollow Object’ 
and ‘Fixing Non-Manifold Geometry’: If these 
tools aren't available, then it may be 
necessary to shop around for a package 
that supports them. 

When you've loaded up your design and 
are ready to export it over to the printer, 
take a moment to consider the cost of the 
print. 3D printing is an expensive exercise. 

If you are planning on a 3D printing career 
move, then you definitely need to take into 
account the amount of material that you 
use for each of your designs. Even if 3D 
printing is just a hobby, printing solid objects 
can soon become an expense you can do 
without. Hollowing out an object, therefore, 
is an easy way to cut down on both 



























interest you. So why bother with 3D 
modelling software? Well, if you've already 
Spent considerable money and time on 
purchasing and building a 3D printer, then it 







download Repetier-Host for Linux from makes sense to understand how a 3D Also, the hollowing-out tool should be able 
goo.gl/vSHW55, and we'll go through the model is created. By designing and creating to reduce the number of internal polygons 
installation process in this article's | in your object. 





accompanying walkthrough. 
The final element in the list of 
ingredients needed for successful 


| “Hollowing out an object is, onci*beestpobens 
ients | : : an easy Way to cut down on is the creation of non-manifold 
3D printing is modelling software, & geometry. Non-manifold geometry 


but this can probably be left until : both materials and time. = occurs when you have any edge that 


a later date, when you've is shared by more than two faces. 









eliminated any kinks with your setup. If you your own 3D models, you will gain more The result may look good enough on paper 
take a moment to browse the wealth of insight into how the printers work and how or in the design, but it’s impossible to print it 
open source models available to download they interpret the G-code data. in reality. 

on Thingiverse (www.thingiverse.com), There are a couple of tools worth looking The majority of 3D modelling packages 
you'll probably find plenty of options that out for when choosing a 3D modelling are able to warn you of a non-manifold 
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mm geometry issue, and as a result most are 
able to fix the problem for you by cleaning 
up the polygons and vertices. At the very 
least, they will highlight the areas where 
non-manifold geometry has occurred, 
therefore allowing you to resolve the issue. 


Troubleshooting 


Most CAD programs will allow you to fix any 
of the problems that may occur with a 3D 
model, or will advise you of potential issues. 
The more complex the CAD program, 
though, the more likelihood there is that it 
will cost a pretty penny, although that’s not 
always the case. 

In our experience, Blender (www. 
blender.org) is the program that fits the bill 
for anumber of reasons. It’s relatively easy 
to use, can fix non-manifold geometry 
through the Mesh menu in Edit mode, and 




























» Our model of Tux should serve as ample 
inspiration for your 3D printing projects. 







can be used with great success when 
creating hollow objects. Blender also 
enables you to import all manner of 3D 
model file types and save them as STL files 
ready for loading into Repetier-Host. Finally, 
Blender lets you edit and improve existing 
models from the likes of Thingiverse. While 


Step by Step: your first 3D print 








E3 Download model 

Locate a model from Thingiverse, and click on 
the ‘Download This Thing!’ button for the STL 
files. Save them for later. Download Repetier- 
Host at goo.gl/vsHW55. Update by entering 
the usual apt-get commands: 

sudo apt-get update && sudo-apt-get upgrade 





libhttp-daemon-perl Libhttp-date-perl Libhttp-message-perl 
libhttp-negotiate-perl Libice-dev Libio-socket-sst-perl 
Liblwp-mediatypes-perl liblwp-protocol-https-perl Libmail-sendmail-perl 
Libmodule-build-pert Libmodule-signature-perl Libmro-compat-perl 

| Libnet-dbus-perl libnet-http-perl Libnet-ssleay-perl Libpango1.6-dev 

| Libparams-util-perl libpcre3-dev LibpcrecppO Libpixman-1-dev Libpngi2-dev 

fe GMs) olelebaat-le(ul eas te Ml hele tbe halle m Gel baile tbe aati l te bre lag 


| Libregexp-common-perl libsm-dev Libsoftware-lLicense-perl Libstdc++6-4.7-dev 


lLibsub-exporter-perl libsub-install-perl Libsys-hostname-long-perl 


Libtext-template-perl libtie-ixhash-perl Libwww-perl Libwww-robotrules-perl 


| Libwx-perl Libwxbase2.8-0@ Libwxbase2.8-dev Libwxgtk2.8-0 Libwxgtk2.8-dev 

| Libxii-dev Libx1i-doc Libxau-dev Libxcb-renderO-dev Libxcb-shm0-dev 

| lLibxcbi-dev Libxcomposite-dev lLibxcursor-dev lLibxdamage-dev Libxdmcp-dev 

| Libxext-dev Libxfixes-dev Libxft-dev Libxi-dev lLibxinerama-dev 

MS Sukie TLS taee ee ashlee ule dia h eee lee aa 
Libxrandr-dev lLibxrender-dev po-debconf wx-common wx2.8-headers 

Mee Sete ieehiae Od tie ee Sele thas oie See le kee eter lulls bee 

| xliproto-fixes-dev xliproto-input-dev xliproto-kb-dev x1iproto-randr-dev 

| xliproto-render-dev x1liproto-xext-dev x1l1iproto-xinerama-dev 

Mee eet ieee Le eae eee mae epee bee oY 

© upgraded, 117 newly installed, © to remove and 38 not upgraded. 

iNeed to get 42.2 MB of archives. 

lAfter this operation, 143 MB of additional disk space will be used. 
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© Install the update 
cd [folder] 
tar —xzf repetierHostLinux_0_95.tgz 
cd RepetierHost/ 
/configureFirst.sh 
Answer ‘Yes’ to any dependencies 
cp Repetier-Host.desktop ~/Desktop 





some users may prefer one 3D modelling or 
CAD program over another, we find Blender 
to be extremely helpful for our purposes. 

Now that we have the ingredients 
together, we can start to cook up some 3D 
objects. We will run through a basic print of 
an object from Thingiverse in the 
walkthrough, but check out the Printing tips 
box for even more help. 

Once you've created a few objects, you'll 
soon notice that there is a great deal of trial 
and error involved with 3D printing, and that 
some considerable tweaking is necessary to 
perfect your models, when it comes to both 
the hardware and the software. Our advice 
is to remain patient, read the forums for the 
printer and the software you're using, and 
not to be afraid to ask for help if you need it. 

Good luck with your 3D printing projects. 
Let us know how you get on! 












E) Set up the printer 
Double-click the Repetier-Host icon, and set up 
the printer according to its instructions. Once 
that’s done and tested, ‘load’ the STL file 
downloaded from Thingiverse into Repetier- 
Host. Click on the ‘Slicer’ tab, followed by ‘Slice 
with slic3r’ to convert the model to G-code. 








£3 Send to the printer 

Connect to the printer, and click on the ‘Manual 
Control’ tab, then click on the ‘Heated Print 
Bed’ option to activate and heat up the print 
bed before sending the file through to print. 
When it has reached the optimum 
temperature, click on ‘Run Job’ to send the 
data through to the printer. 
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Ey Keep watch 

Keep an eye on the printer as it works. Make 
Sure there are no draughts and that there's 
nothing in the way of the nozzle as it prints 
the layers. 
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(5 Take out your object 

When the print is finished, clean any excess 
away and carefully remove the object from the 
print bed. If needed, clean the print bed and 
repeat the process for any objects that may 
attach to the first (as in our example). 













There's a great deal of fun to 
be had from building 
something from a kit, but if 
you're not very technically 
minded and your soldering 
Skills are terrible, then you may 
want to consider asking 
someone for help or opting for 
a pre-built printer. 

The Velleman K8200 that 
we built was a fascinating 
project. It took us around a 
week to complete, in between 
jobs, and needed another pair 
of hands at certain points. 


While it is generally a good 3D 
printer, it does require some 
additional tweaking before you 
can get a perfect print with 
every attempt. 

For starters, the print bed is 
very difficult to flatten — some 
users have found success by 
grabbing a mirror of the same 
dimensions as the print bed 
and taping it into place on top 
of the bed. 

A second drawback is the 
thermistor. This is the element 
that controls and measures the 


temperature of the print bed. 

It is ridiculously small, and it is 
nigh on impossible to solder 
between two points. We'll never 
understand why this doesn't 
come pre-soldered. 

You will almost certainly find 
that there will be a lot of 
scrapped prints between the 
first run and your perfectly 
tweaked final designs. This is 
an issue with 3D printing in 
general, so please be prepared 
to fork out some money on 
extra filament. 


> The thermistor, which controls the 


Step by Step: starting off with 3D models 





}Get some practice 








Add to your model 


temperature of the print bed, is very small. 


Getting to grips with your first 3D model can be daunting. If you're 
feeling nervous, go to www.3Dtin.com. Use the website to try copying 
shapes of household objects. 


With the first part of the basic design now created, try adding 
something else to it in order to expand the object and improve your 
sense of 3D geometry. 








/ Make your model more complex 

Next, add a third object to the environment with the aim of combining 
them all, or at the very least connecting them. Take a moment to rotate 
the design and see it from all angles to check that it’s complete. 
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<3 Perfect your design 

Finally, combine or connect the objects and try to make your 3D 
geometry look correct. It doesn't matter at this stage if the design is 
capable of being printed — practising and getting used to working in 3D 
is the emphasis here. 
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Android: the 


slodecalclesiilela 


CyanogenMod is changing from a community-driven mod to a big business 
venture. Matthew Bolton talks to its founders about this new opportunity. 


yanogenMod is one of the most 
popular third-party Android 
ROMs available, with over eight 
million users, but there’s a 
predicament that’s been weighing on the 
minds of its development team. 

“| think that for every one person that does 
install CyanogenMod, there’s maybe five or six 
that try but don't finish. | had one of our board 
members try to install it, and he actually gave 
up,’ laughs Koushik Dutta, one of 
CyanogenMod's lead developers (known to 
the community as Koush). “He said, ‘It’s mind- 
boggling that you have as many users as you 
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"do, given how difficult and technically-inclined 
you have to be to do it.” 

The problem of getting people to actually 
use its software isn’t an issue that the 
CyanogenMod team has taken lightly. In fact, 
it's one of the spurs that has pushed the team 
into turning its community-based, open- 
source Android spin-off into a full-on business 
venture: Cyanogen Inc. 

With seven million dollars in funding behind 
it, the core CM team, including Koush and 
CyanogenMod's founder Steve Kondik (known 
as Cyanogen), is now hard at work turning the 
enthusiast-friendly ROM into a mainstream 
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hit. And the first challenge facing them is 
making it easy to install. 

“What we hear from everybody is that, 
‘Yeah, | share this with my friends and | think 
essed qcy- 1mm Ol0] mtal-lam mes) menl- sem arlene =\ REV 
to do to install it and they bail?’ says Kondik, 
with the air of someone who's pitching a 
product they're proud of. “So we've made this 
installer. We say it’s one-click, though in reality 
it’s more like three clicks. But we've been 
doing some pretty extensive usability testing 
on it, because the big goal here is to get CM to 
as many people as possible. We think that the 
whole walled garden approach is fine, but It’s 





getting tired, and people want an alternative, 
and we've absolutely proven that. By having 
this installer, the current growth is just going 
to go crazy. It’s just going to sky rocket.” 

He's not joking either — after announcing 
the Cyanogen business, the brand new servers 
were brought to their knees by over 38 million 
downloads in just one month. And the team 
was keen to point out that, while the installer 
is seen as the crucial first step to making CM 
more popular outside of hardcore Android 
users, it’s only the beginning. 


In with the new 


“We need to make it really easy to install, and 
then we have to start building compelling 
reasons for people to install it” says Koush. 
“Right now, the main reason people install it is 
because what is out there is just... not very 
good,’ he hesitates to say. It’s clear that he 
doesn't want to insult anyone’s work, but it’s 
also clear that this is the thought that’s 
fuelling the team's will to develop CM into 
something larger. He's back into a confident 
stride when he continues, “And | don’t want 
the reason that users come to us to be 
because the competition isn’t good. | want the 
reason users come to us to be oe we 
are awesome.’ 

To get to a point where users are being 
attracted to CM, the team is taking a few 
different approaches. One aspect is to build 
more useful services into the operating 
system, including network-based services. 


“We're contracting a really notable security 
researcher, Moxie Marlinspike, to build a 
secure messaging/iMessage product for us,” 
says Koush. 

Another big change will be getting CM 
installed on phones as the default operating 
system, starting with a partnership with Oppo 
on the N1, a new flagship phone: “Oppo had 


“The main reason people 
install it is because what is out 
not very good.” 


there is just... 


given us support in the past, and when we 
were forming the company, | told them what 
was going on. For the global release of the N1, 
there's an officially supported version of CM, 
and there's also going to be a limited edition 
that will actually run CM by default,” says 
Kondik. “This is just the beginning of bigger 
things, really. We have the chance to do some 
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experimentation and get everything in place to 
support something like this, and then next 
year we'll do something bigger. It’s got to be 
done right, though. You can’t just put some 
branding on a phone and sell it. You've got to 
provide something that you can't get 
elsewhere, especially if you want to make 
money off the thing. It’s going to be important 
to have a really 
great platform, 
really great 
services. People 
aren't just going to 
shell out $800 for 
a device unless it’s 
really giving them something that they can’t 
get elsewhere.’ 

There's also the opportunity to use the 
team’s knowledge, and the flexibility of CM’s 
Android roots, to make something new that 
appeals to a different audience. “One of the 
things that we're doing now is we're working 
on a version of CM — well, actually, building on » 
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») top of it — to create something that’s more 


tailored to a bigger sector of the market,’ says 
Kondik. “CM is absolutely perfect for people 
who are technical, and everything is designed 
for people who are technical. We don’t want to 
dumb it down, but we want to wrap some of 
that stuff in a prettier face. Sometime next 
year, we're planning on launching something 
quite a bit bigger that’s geared more towards 
a broader market.” 


Mass appeal 
These plans help to explain why the team 
wanted to take the chance to push CM further 
by creating a business around it, but the 
decision understandably caused some 
concerns from the community, while some 
contributors wanted to know whether they 
would get paid a portion of the new business 
money for the work they put in. 

“| think some of the younger guys have this 
vision that Steve and | got written this seven 
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million dollar check that went into our bank 
accounts,” says Koush, with a mixture of 
amusement and frustration. “The money that 
we got is to build a business, so it’s hiring 
people, paying them, building out an office, 
paying for the servers that have been donated 
for so long, paying for bandwidth... We're 
paying for so many different things that it’s 


“You’re going to see a version 
with extra stuff that we’ve done 
that we think is awesome.” 


scary looking through the transactions of our 
business bank account.” 

The new company has no interest in paying 
for previous contributions, because that 
doesn’t do anything to push its business 
forward. Instead, it’s going to look to reward 
contributors for new work. “We're going to hire 
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some contributors,’ Koush says. “And we want 
to do stuff that other open-source projects do, 
like bounties for features. And we're 
contracting people.’ 

The new company has also announced 
that some of the work it will do will be 
proprietary, leading to concerns over the 
future of the open-source project. Kondik 
understands these fears, but is fairly bullish 
that they're unfounded. “When you look at 
Android, it was done with a very specific goal 
in mind — to really screw up an industry that 
had gone so far down the proprietary software © 
route that it was hopeless. And they totally 
succeeded. But now it’s happening again, and 
we're hoping to be the answer to that,” he 
muses. “But you have to find a balance. 

The things that we won't be releasing are the 
things that give us a competitive edge. We 
won't release the source code for our installer. 
That would be crazy.’ 


Keeping competitive 
But Koush allays concerns that everything will 
be entirely locked up: “We don't have any 
plans to close source any of the existing stuff,’ 
he says, definitively. “We're building on top of 
the open source project. We're not even 
maintaining a closed fork of CM internally. 
Anything that we need to do to support our 
own applications, we'll build the APIs 
[application programming interface] into the 
open source side and ship that. Going forward, 
you're going to see two release branches. One 
is going to be business as usual; what we're 
releasing today. Then you're going to see a 
version that comes with extra stuff that we've 
done that we think is 
pretty awesome.’ 
Some community 
members have also 
worried about the 
pressure ona 
business to make 
money, and how that will affect CM at large. 
“Right now, we're following the great Silicon 
Valley idea of ‘get the users, and the money 
will come later’’ says Kondik. But this strategy 
can be problematic, with users often annoyed 
when things, such as ads are put into services 
that were formerly ad-free. “I think our virtue, 
and the reason people want to use our stuff, is 
that we don’t do that,” Kondik continues. “If we 
were to do that, it would basically be suicide. 
That’s the biggest thing that we hear from 
everybody: ‘Oh, they're going to put ads in it, 
crapware; and all this stuff. But that’s the 
opposite of our plan. We're in this for the long - ° 
haul. We think it’s going to be a big company. 
We're not trying to make a quick buck and 
then get out. We're trying to build something 
important. There’s too much time, and too 
many emotions from too many people 
involved to give it anything less than what it 
really deserves.” 





It’s important for a project such as 
CyanogenMod to remember the emotions and 
history that went into getting the movement 
to where it is today. When Kondik and Koush 
look back on the early days, they talk about 
the speed of growth and voracity of its 
contributors as though they're not quite sure 
how it happened or if it really happened at all. 
“A few people had looked at different 
approaches to building on Android, but when | 
posted my version up, people seemed to really 
go crazy over it,” says Kondik. “It was really 
awesome time because of how quick people 
were to try it out and give feedback on what 
was broken and what could be better. So | 
kept at it for a few months and more people 
started using it; more people started 
submitting patches and wanted to work on it. 








Koush got involved later on when the first 
Motorola Droid hit the shelves, and started 
porting CM to it.” 

“| recall the first year there was maybe only 
a dozen guys, and then | disappeared for a 
year, and | came back and there were a 
hundred guys,” says Koush. “And then a year 
later there were 500, and now there's 2,000. 
It’s just crazy. It’s exponential growth for 
contributors and for users.” 


Gaining ground 

But despite all the changes that come from 
mvoing from a purely contributor and 
community-driven project to a well funded 
business, the team promises that the feel of 
CyanogenMod won't change. “A lot of the guys 
who were on the open source project were 
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) Limited editions of the Oppo N1 handset 
will run CyanogenMod by default. 





going to their day jobs and then hacking on 
CM for a long time, including myself,” says 
Kondik. “And now we just work on CM the 
whole time. But one thing that has not 
changed is working very, very late. Until 5 
o'clock in the morning,” he laughs. But is it the 
classic Silicon Valley startup with fun toys 
around the office? “We have a Kegerator!” 
shouts Kondik, proudly. “And a really nice 
coffee machine,’ adds Koush. “l think we're all 
on the same page; the office is somewhere 
you want to come into and work, so we don't 
do cubes. We have a nice setup and a design.” 
There's one thing that will change for 
CyanogenMod when the OS launches for a 
mainstream audience, though: the name. The 
team says that the company will still be called 
Cyanogen, and the open source project will 
keep its name, but for reaching a wider 
audience, the OS will be called something new, 
and this change may be related to CM's 
partnership with OnePlus (http://oneplus.net) 
but Koush is staying tight-lipped: “Yeah, it’s 
changing...” he chuckles. “For a mass 
consumer release, ‘CyanogenMod' doesn't 
cy Clot NVACO)|MONMUR(-McOlgrc1U(-Me 








What on Earth 











What on Earth is Gnu PG? 


Matt Hanson coffs his tin foil hat and quickly peeks out of his concrete 
bunker to fill us in on the GNU Project's FOSS cryptographic software. 


Do you ever feel like our conversations 

here are being read by other people? 
A No — people have better things to do then 

spend time reading what we're saying. 


Good point. Still, I'm feeling slightly 
paranoid. Could you tell me about some 
fancy technology that will keep me safe, 
secure and, most importantly, calm? 
yy By a happy coincidence, we can. We've 
been meaning to talk to you about GnuPG 
— a technology that’s been protecting your 
privacy behind the scenes for quite a while. 


Ooh, | love a good acronym! So what 

does GnuPG stand for? 
A GnuPG stands for GNU Privacy Guard, and 

the technology is also sometimes referred 
to as GPG. It’s a completely free and open 
implementation of the OpenPGP standard, 
created by the GNU Project. The OpenPGP 
standard is based on PGP (Pretty Good 
Privacy), which has been around since 1991, 
and is now owned by Symantec. 
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So to use PGP you'd need to buy a 

licence from Symantec? 
A Yes, which is why the non-proprietary 

OpenPGP has become the most widely 
used email encryption standard in the world. In 
1997 the OpenPGP Working Group was formed 
to define a standard that would be proprietary 
from its inception — PGP. OpenPGP became 
an IETF (Internet Engineering Task Force) 
Proposed Standard (RFC 4880), and can be 
implemented by anyone, with no licencing fees. 


| like the sound of OpenPGP, but where 
does GnuPG come in? 
A GnuPG is a GPL licensed alternative to 
PGP that's compliant with RFC 4880 — 
our old friend OpenPGP. GnuPG is primarily a 
program run from the command line, though 
there are graphical user interface front ends. 


I’m still not feeling safer! What does 
GnuPG do, exactly? 

A GnuPG is cryptographic software designed 
to protect data in two key areas. The first is 
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confidentiality, which ensures that no one 
except the people you designate will be able to 
read it. The second is integrity, which means no 
one can change your data covertly. This leads 
to what the GNU Project calls ‘assurance. 


| understand integrity and confidentiality 

but what does it mean by ‘assurance’? 
A It means you can be confident that, when 

you use GnuPG correctly, your data will be 
kept confidential, with its integrity intact. So, 
when sending an email with an attachment to 
a workmate, you can be sure that no one but 
the two of you can read the email, and that the 
attachment wasn’t changed as it was sent. 
However, the GNU Project is keen to stress that 
an assurance Is not a guarantee. 


What should | do to make sure my distro 

is equipped with GnuPG technology? 
yy Typically it depends on what distro you're 

using, but luckily anumber of them come 
with a version of GnuPG already installed. For 
Debian and Ubuntu, GnuPG is installed by 


default — though if for some reason it’s not, you 
can use the APT package manager to install 
gnupg2. CentOS and RHEL come with an older 
version of GnuPG already installed. Although 
this version is still secure, you can use YUM to 
install the gnupg2 package. The situation with 
Fedora is similar, but it usually comes with a 
more recent version of GnuPG than CentOS or 
RHEL, so you probably don't need to update. 


So does that mean GnuPG technology is 
exclusively for Linux? 
yy Thankfully, no. As much as we'd love 
everyone to use Linux, the reality is that 
many people use Windows or Mac OS, and for 
software to ensure your data is protected, 
it needs to be compatible with as many 
platforms as possibles. Along with Linux, 
Windows and Mac OS, GnuPG is also available 
for FreeBSD and VMS operating systems. 


That makes sense. Where can | get 

GnuPG for those operating systems? 
A For Windows, head to www.gpg4win.org, 

where you'll find an installer. Gog4win 
combines a number of handy features that 
makes it easy for Windows users to take 
advantage of the protection that GnuPG offers. 


“It’s refreshing to see 
governments support 
measures to keep data 
secure and private.” 


As well as the core GnuPG technology, there’s 
GFA (an alternative certificate manager), 
GpgOL (an email encryption plugin for 
Microsoft Outlook 2003/2007/2010/2013), 
GpgEX (a file encryption plugin for Windows 
Explorer) and Claws Mail, an email application 
with cryptographic support built in. Gog4win 
works with Windows XP, Vista, 7 and 8 in 32 
and 64-bit configurations. 

If you're after GnuPG tools for Mac OS X 
then you'll want to get GPG Suite from 
https://gpgtools.org. This suite includes 
MacGPG, which is the underlying engine. It’s 
based on GnuPG 2.0.22, and is run from the 
command line. The suite also includes GPG 
for Mail, which is an email encryption plugin for 
Apple Mail, GPG Keychain, an application that 
helps you manage OpenPGP keys, and GPG 
Service, a plugin that works with most 
applications to add GnuPG features such as 
encryption and verification processes. GPG 
Suite is compatible with OS X 10.6 to 10.9. 


Great — and what do | need to do if I’m 
using FreeBSD? 

yy To install GnuPG on FreeBSD, run the 
following commands as root: 

cd /usr/ports/security/gnupg 

make install clean 








You mentioned GnuPG 2.0.22. Are there 

any other versions | should know about? 
yy Yes — 2.0.22 is the latest stable release of 

the modern version of GnuPG, there is also 
another stable release, version 1.4.16, which is 
from the older GnuPG-1 series. The older 
version of GnuPG is maintained because it’s 
still used on a number of platforms — especially 
older computers and mobile devices. It has a 
smaller footprint and is easier to build, though 
it lacks support for S/MME, Secure Shell and 
other tools for desktop environments. 


So I’ve got GnuPG installed on my 

system. What do | do now? 
yy GnuPG is configured to offer you and your 

data the best possible protection straight 
away. For example, by default GnuPG will 
generate 2,048-bit RSA keys for encrypting 
your data. If you're feeling confident and want 
to change GnuPG's settings to suit your needs, 
you can open the gpg.conf file, usually located 
in ~/.gnupg, and edit the settings there. 


I’m always interested in encryption. 

What's a 2,048-bit RSA key? 
A RSA is a public key cryptosystem that’s 

widely used throughout the world. It was 
developed in 1977 by Ron Rivest, 
Adi Shamir and Leonard Adleman 
— hence ‘RSA: It takes two large 
prime numbers, along with an 
auxiliary value, and creates two 
numbers that are used as the 
public and private keys. The public 
key is used to encrypt text, and 
the private key decrypts it. So if we send you a 
message, we can find out your public key and 
encrypt the message accordingly. You can 
then decrypt the message with your private 
key, which we would never know. For more 
information on RSA encryption check out 
http://bit.ly/IxfRSA. According to the United 
States National Institute of Standards and 
Technology, 2,048-bit RSA cryptography will 
be secure until at least 2030. 


Where does the German government 
come into this? 
yy In light of the NSA and GCHQ scandals, it’s 
refreshing to see governments support 
measures to keep individual's emails and data 
secure and private, but that is exactly what 
Germany's Federal Ministry of Economics 
and Technology did in 1999 when it invested 
250,000 Deutsch Marks in the GnuPG Project, 
which was coordinated by Werner Kock — a 
programmer from Dusseldorf. 

Gpg4win was created with support from 
the German Federal Office for Economy and 
Technology, with the aim of bringing GnuPG to 
the dominant OS. The idea was to port GnuPG 
to Windows along with an easy to use graphical 
user interface and extensive, good quality 
German documentation. The project was 
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successfully completed in 2000, and resulted 
in the creation of several key technologies that 
made GnuPG more user friendly. 


Anything that makes my life easier and 

more secure is good in my books. What 
technology did this project produce? 
A As well as revising some of the technology 

behind GnuPG, the project developed the 
Gnu Privacy Assistant, which is a graphics key 
manager, the crypto-programming library 
GpgME, and integrated tools for the Syipheed 
email program. Alongside these technologies, 
third parties individually contributed WinPT, a 
program that offers support for the Windows 
clipboard for encryption purposes, and the 
Gdata Outlook plugin which brings GnuPG to 
Microsoft's Outlook email program. A German 
website was also established(www.gnupg.de) 
and the Gnu Privacy Handbook was published 
in both German and English. 

The success of this project led to it being 
extended, with the name changed to GnuPP, 
(Gnu Privacy Project). This added some new 
technology, such as an updated installation 
packet, plus a lot more user documentation, 
including illustrated handbooks and manuals 
such as GnuPP for Novices, and a mailing list. 


That’s all well and good, but it sounds a 

bit too Windows-centric for my tastes. 
yy That's because it is, at least with Gog4win, 

but that doesn't mean that you and other 
Linux users haven't benefitted from it. For a 
Start, if you're sending something confidential 
to a Windows user, and they're going to be 
sending confidential information back, then 
you're going to want them to have the same 
level of cryptographic security and integrity as 
you. The same applies to the education of the 
person you sent the confidential information 
to. If they are as clued up as you are about the 
importance of data security, you can be sure 
that anything you send them will be protected. 


So | guess you're saying that the 

security of my data is only as strong as 
the weakest link? 
A Exactly, and more often than not your 

weakest link will be the recipient of your 
emails or attachments, who won't have the 
knowledge or tools to keep the data you've 
sent them protected, so any initiative that 
educates people on the benefits of PGP and 
any of its offshoots is always to be welcomed, 
especially when it also promotes the use of 
free and open source software. 


Cool, | want to tell people about this, but 
don’t want to look like an idiot. How do 
you pronounce GnuPG? 
yy According to the GnuPG website (www. 
gnupg.org), the correct way to pronounce 
it is ‘guh-NEW-pee-gee, but we can’t guarantee 
this will stop you looking silly. 
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Dr Chris Brown 

The Doctor provides Linux training, authoring 
and consultancy. He finds his PhD in particle 
physics to be of no help in this work at all. 





Stewards of PID=1 





ou may have seen the 
announcement that Debian has 
decided — on a casting vote — to 


switch to Systemd as its boot system, 
Starting with the Jessie release. 
Subsequently, in a post titled ‘Losing 
Graciously’, Mark Shuttleworth announced 
that Ubuntu will do the same, saying that 
“it will be our default as soon as it offers a 
credible quality of service to match the 
existing init’. Fedora has used Systernd 
since release 15, and RHEL 7 will use it too. 
So | guess that’s pretty much the end of the 
road for Upstart. It must have been a 
difficult decision for Mark, because Upstart 
has been part of Ubuntu since Feisty Fawn 
(back in 2007) and was originally the 
brainchild of James Scott Remnant who 
worked for Canonical at the time. (James 
now works at Google.) 

At risk of being branded a Luddite, 
| would personally have preferred to stay 
within my comfort zone of good ol’ init with 
its straightforward inittab and old-fashioned 
‘System V' style run levels. | never much 
liked Upstart, and | won't be sorry to see it 
go. | am conscious that is my age talking. In 
my younger days | devoured new 
technologies like a raptor guzzling its prey. 
Now, I'm happy with a mug of Horlicks. 

More pragmatically, as an IT trainer, 
technology splits give me headaches 
because you need to decide which 
technology to teach, or risk confusing your 
audience by trying to cover them all. So 
| guess that moving forward I'll be able 
to focus on Systermnd. 
chris.linuxformat@gmail.com 





Availability and durability 


Do the math: if you stored a total of 10,000 
objects in S3 you could expect to lose one 
every 10 million years. If I'm still around 

in 10 million years, I'll get in touch and let you 
know how it all worked out. 


Interestingly, Amazon claims an impressive 
99.99% availability for your data in its Simple 
Storage Service (that’s a tiny 4.4 minutes 
downtime a month) and an astonishing 
99.999999999% per year for the durability. 
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Esoteric system administration goodness from 
the impenetrable bowels of the server room. 


Does Amazon's claimed 
99.999999999% per annum for 
durability of data in S3 ignore the 
risk from large meteorites? 





Durable storage 


Amazon's S3 offers availability and durability. Now 
you can access it from a Linux command prompt. 


he world is awash with cloud-based 
storage solutions such as Ubuntu One, 
Dropbox, and Google Drive. These are 

popular because they provide client-side tools 
that will automatically synchronise directories 
on your local machine with the cloud-based 
storage. Amazon's S3 (Simple Storage Service) 
provides an alternative. It is very much 
a pay-as-you-go service ($0.085 per GB per 
month), and it can be accessed via a nice web- 
based interface (part of the AWS Management 
Console), or through a web service API. 

| recently discovered a tool called s3cmd 
that provides command line access to 
S3 storage. First, | downloaded the tarball 
(s3cmd-1.5.0-betal.tar.gz) from 
http://sourceforge.net, then extracted the 
archive and ran the installer: 
$ tar xvf ~/Downloads/s3cmd-1.5.0-betal.tar.gz 

$ ed s3cmd-1.5.0-betal 
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$ sudo python setup.py install 

That was easy enough. The next job was 
to import my AWS keys into s3emd so that 
it could authenticate to the service on my 
behalf, like this: 

$ s3cmd --configure 

You'll be prompted for your AWS Access 
Key and Secret Key, which you were given 
when you signed up for the AWS account. Just 
copy and paste them in here. 

Now we're all set to go. As a test, | decided 
to use S3 to back up the directory containing 
all my Linux Format articles. First, | created 
an S3 bucket for the purpose: 

$ s3cmd mb S3://LXF 

Now, | could choose to upload and 
download individual files from S3 with the ‘put’ 
and ‘get’ subcommands (rather like the old 
command-line ftp commands), but | was 
attracted to the syne command that let 
me efficiently synchronise a local directory 
tree to S3 storage: 

$ s3cmd sync ~/LXF S3://LXF 

It took a while to initially upload all 1SOMB, 
but after that, syncs only propagated the 
changed files, and took a matter of seconds. 

If you already use S3 for storage, s3cmd 
is definitely worth a look. 
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Automatic intrusion detection 


We all hope it won't happen, but if your server gets hacked it’s much better 
to know about it sooner rather than later. 

Wi: your machine is unexpectedly compromised, 

then it’s best to know about it as soon as possible. 


Sometimes it’s glaringly obvious when there is an issue. 

For example, if your website has been defaced or your 
database has been deleted you will know that something's up. 
But a more subtle intruder may take pains to cover their 
tracks so that they can use your machine for their own 
nefarious purposes without you even knowing it’s happening. 
This is where intrusion detection systems like AIDE can help. 
It’s all about reducing the ‘breach-to-detection’ gap. 

The basic idea behind AIDE is to create a snapshot of the 
filesystem when it is known to be in a pristine and 
uncompromised state. At a later time, it will then compare the 
current state of the filesystem with the previous snapshot. 
Any unexpected changes may represent hacker activity, and 
are reported. The snapshot is not a literal bit-for-bit copy 
of the filesystem, but a database that captures the access 
permissions, inode number, user, group, size, timestamps, 
number of links and name of each file. Importantly, AIDE also 
captures a cryptographic checksum of each file using one 
or more hashing algorithms: SHA1, SHA256, SHA512, md5, 
rmd160 and tiger. 

AIDE is (in some sense) a replacement for Tripwire. 
Tripwire was originally an open source intrusion detection 
application that did basically the same as AIDE. Some time 
ago, Tripwire grew into an ‘enterprise grade’ product that 
could do additional fancy stuff like detecting changes in your 
firewall rules or the stored procedures in your databases. 
The website (www.tripwire.com) is full of marketing speak 
such as, “Trusted technology for connecting cybersecurity 
to your business decisions.” It boasts about demonstrating 
conformance to security standards such as HIPAA for sites 
that handle personal health information, and 1SO27001. I'm 
sure that it’s an excellent product, but the site is too coy to 
mention anything as vulgar as a price, and | haven't asked! 


e do our best to keep our servers secure. But 
Later... 


_ system 


aide - a 


a. 


Rename ——~ _ aide.db.gz 


At installation time... 


ARN ile system 





aide --init 


aide.conf 


aide.db.new.gz 





> AIDE works by 
building an initial 
snapshot of the 
filesystem, then 
comparing the 
filesystem with 
the snapshot 

at a later time. 


Be aware, though, that the two distros take rather different 
approaches to creating an initial configuration. For this 
tutorial, | used CentOS. 


Instant gratification 

I'm always eager for instant gratification, so immediately after 

installing AIDE | decided to give it a whirl with its default 

configuration. The first thing that you have to do is to take 

your baseline snapshot: 

# aide --init 

AIDE, version 0.14 

### AIDE database at /var/lib/aide/aide.db.new.gz initialised 
This will take a while to run. Just how long depends 

on how big your filesystem is, how many checksums you've 

chosen to compute (more on that later) and how fast your 

computer is. But you will certainly have enough time to brew 


In stark contrast, the homepage of the AIDE website 
(http://aide.sourceforge.net) just lists the key features, tells 


you where to get it from, and provides links to the main pages. 


Easy installation 

You should find AIDE in the repositories of most distros, 
so installation should be straightforward. On CentOS, for 
example, it’s simply a matter of running: 

yum install aide 

and on Ubuntu it’s just: 

sudo apt-get install aide 


Timestamps 


a nice cup of tea. AIDE recommends that the initial database 
is generated “immediately after the operating system 

and applications have been installed, before the machine 

is plugged into a network”. Quite frankly, | think that this 
recommendation is unrealistic. For a start, the chances are 
you will need to download AIDE from your distro’s 
repositories in the first place. Also, it is good practice to 
download any security updates from your distributor after the 
initial installation. (It all depends on your level of paranoia, and 
who you trust.) But certainly you should do it as soon as 
possible after installation, not six months downstream. » 





Every file in Linux carries three timestamps, 





and there is sometimes confusion about Modification time Ealing te fle, appending to, copying over it. 


what they all on Here S a little table ctime Change time Changing the ownership or permissions of the 
to summarise. Up until ext4, there was file 


no birthtimestamp, so you cannot tell atime Access time Making a copy of the file, compiling it, 
how long a file has been around. examining it with less, ... 
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Permissions 
Inode number 
‘Number of links 
User (owner) 
Link name 


Group 


Size 

Modification time 

Access time 

Change time (ctime) 
Growing size 

SELinux Security context 
Extended file attributes 
The MD5 hash 


>) AIDE’s groups are constructed by combining these basic file attributes. 


» After running aide --init, | renamed the database as the 
input database, ready to run AIDE in check mode: 
# cd /var/lib/aide/ 
# Is -l 
total 7224 
-IW------- . 1 root root 7396869 Jan 31 18:58 aide.db.new.gz 
# mv aide.db.new.gz aide.db.gz 

Next, to show aide in action, | made a surreptitious edit 

to /etc/passwd, adding the line: 
archive::0:0:root:root:/bin/bash 
and this gives me a handy (if rather obvious) superuser 
backdoor. | then ran AIDE in check mode: 
# aide --check 
and went to make another nice cup of tea. Reassuringly, AIDE 
reported the change to /etc/passwd, showing that its size, 
timestamps, inode number, and various checksums had all 
changed. The screenshot at the top of page 57 shows this. 
| would encourage you to try the experiment for yourself — 
but don't forget to take that line out of etc/passwd 
afterwards! In reality, you would not run aide --check 
interactively, instead you'd run it as a daily cron job, with the 
output mailed to root. 

To state the obvious, running AIDE is a waste of time 
unless somebody actually takes the time to read the reports. 
Doing this on a daily basis requires quite a lot of discipline. 
Doing it for 50 servers requires real dedication. Of course, 
it gets much worse if your reports contain lots of false 
positives, because there is a real risk that these results will 
drown out a crucial entry that flags up a genuine problem. 
Therefore, it’s important to sit down and think (ouch!) about 








what filesystem changes are expected and what aren't, 
and then to translate that policy into a config file. The 
mechanics of running AIDE are simple enough, but writing 
the config can be quite tricky. 


That darned config file 

The AIDE config file is essentially a set of rules, each of which 
says, “for THESE files, notify me if THESE attributes have 
changed”. To give you a concrete example: 

/bin ut+gt+s 

means “for files under/bin, tell me if the user, group, 

or size have changed”. The concept is easy enough to 
understand, but the devil is in the details. 

To start at the beginning, AIDE has a number of built-in 
names that refer to specific file attributes. Some of these are 
shown in the table on the left. If you have installed AIDE you 
will also find a list on the main page for aide.conf. In addition, 
there are pre-defined names that refer to the various 
checksum (hashing) algorithms: md5, SHA1, SHA256, 
SHA512, rmd160, tiger, haval and crc32. In my view, using just 
a single, secure hash algorithm — SHA512 perhaps -— is 
entirely sufficient. Choosing to use more than one seems 
to indicate a rather unhealthy degree of paranoia and will 
Significantly increase the time it takes to run AIDE. 

There are also some pre-defined combinations of 
attributes, in particular there is ‘R’ (intended for read-only 
files) and ‘L’ (intended for log files). These are defined like this: 

R: ptitl+n+utg+stmt+ctmd5 

L: ptit]+n+u+g 

I'll leave it up to you to consult the table to figure out 
what these combinations actually mean. 

The config file on CentOS also defines a number 
of combinations of these basic attributes, so you will 
see lines like this: 

PERMS = ptitutg+acl+selinux 
NORMAL = R+rmd160+sha256 

PERMS refers to the access control settings, and 
NORMAL is an extra-paranoid version of ‘R’ for people who 
want to use three hashing algorithms instead of just one. 
Basically, NORMAL means that “we don’t expect this file 
to change in any way”. Of course, you can also define your 
own attribute groups if you want. 

Having defined the attribute groups, we get to the tricky 
business of specifying the rules. The default configuration 
on CentOS makes heavy use of the NORMAL attribute group. 
For example we'll see these lines, among many others: 

/bin NORMAL 
Nib NORMAL 
/usr NORMAL 

Turn off checking specific files or subdirectories like this: 

!/usr/sre 


An ancient story about false positives 





Many years ago, when | worked in a machine 


vision research group at Sheffield University, CCTV images captured by the cameras grey pixel (the rabbit’s tail) doing bunny-hops 
we were approached by an organisation. (I positioned on the fence posts to identify and against a background of slightly darker pixels. 
honestly can’t remember who, which is a Good eliminate the rabbit threat. For any nature- On that basis, it seemed unlikely that we could 
Thing because they would probably come and lovers out there, | should be clear that we were write software to discriminate between rabbits 
shoot me if | told you.) They were plagued by not trying to nuke the actual bunnies but to just and evil intruders carrying bolt croppers, so the 
false positive reports of attacks generated discount the reports from the intrusion- project went no further. Nonetheless, it did 

by the sensors around their perimeter fence. detection sensors that the rabbits were instill in me a better understanding of why false 
Rabbits were causing the issue. causing. So | visited the site and they showed positives are a problem. 
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They wanted to know if we could analyse the © mesome recordings that displayed a single 
















File: /etc/passwd 

Size : 1634 
2014-01-31 18:47:25 
2014-01-31 18:47:26 
164779 


Mtime 


ctime : 
Inode : 
MDS ; 
RMD160 ; 
SHA256 : 


but if you do this, be careful of the file name matching 
algorithm that AIDE uses. Essentially, the names you specify 
are treated as regular expressions (not filename wildcards) . 
that are implicitly anchored to the beginning of the file name 
but not to the end. This means that a smart intruder could 
hide files under /usr/src-rootkit (for example) and AIDE 
wouldn't notice. You'll find examples of this carelessness 
in the CentOS configuration, such as the rule: 

V/etc/.*~ 

which is intended to prevent checking of backup files (names 
ending in‘~’) but inadvertently allows a nice hiding place — 
any file under Zetec with a‘~’ in the name will be ignored. The 
rule should really include an end-of-string anchor like this: 

Vetc/.*~$ 


What should | monitor? 


At one end of the spectrum, if you have an active set of users 
on your machine (even if it’s just you, your Spouse and your 
kids) then you're going to see day-to-day changes in the files 
under /home and you probably don't even want to monitor 
that. At the other extreme, there are some important parts 
of the filesystem that you certainly don't expect to change 

— at least, not without you knowing about it. These include the 
directories in which the system binaries live (/bin, /usr/bin/, 
/sbin, /usr/sbin) and — equally important — the system 
libraries. These are usually in /lib and /usr/lib, although 
RedHat-style distributions also use architecture-dependent 
directories like /lib64 and /usr/lib64. What about /etc? By 
default, the CentOS configuration only monitors files in 
/etc for permission changes, via the rule: 

/etc PERMS 

but it turns on stricter checking for a number of key files. 

For example: 

/etc/passwd NORMAL 

/etc/shadow NORMAL 

| can't tell you what your config should look like. That's 

up to you. Running AIDE with the default configuration 

is probably much better than not running it at all, but you 
should really tune it to your server's circumstances. 


Coping with change 

In reality, files in system directories will legitimately change 

if you apply the patches and updates that are supplied by 
your distro. After installing these patches, you're going to see 
a lot of reports from AIDE about changed files. As an extreme 
case, | just ran yum update on an oldish CentOS test system 
that hadn't been updated for quite a while. It updated a total 
of 291 packages and the next AIDE check reported over 





eSnFLLP2ZgaV9cS2msVMEg== 
n3XaC2M8b1ypzYIWDzUpuKOIHHO= 
RacD8qHchwfqpNR+1sY2DdJsGuwMeeCp 
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2014-61-31 19:05:26 

2014-01-31 19:05:26 

164778 

s5x/04hMnc7Bsp40C8dcLg== 
msO0OyYbDqntNAFnOXmvz / AmQd6U= 

sr fjiGINiggQpH4rDagohrgqXxXw2TNAmV2 





25,000 changed files: ) Caught red- 
Summary: handed! AIDE 
Total number of files: 106292 reports my 
Added files: 7284 “sneaky” change 
Removed files: 1795 to the file. 
Changed files: 25323 


lf your system has (legitimately) deviated so much from 
the original baseline that the reports have become unwieldy, 
you can choose to update the database using: 
# aide --update 
but you will then need to rename the new database back to 
the original same (as | did after my initial aide --init) before 
you can run a check. 


Protecting the database 

Depending on your level of paranoia, you might want 

to consider protecting the AIDE database and the config 
file. A knowledgeable intruder could easily slip some files in 
and then re-build the AIDE database so that everything 
looked normal. Alternatively, they could tweak your 
configuration file so that their hidden files are not monitored. 
Or they might replace your AIDE binary with a version that 
was deliberately blind to whatever filesystem changes they 
chose. For these reasons, some people recommend storing 
the database, the config file and the AIDE binary on 
read-only media such as a CD. 


Debian is different 


If you're installing AIDE onto a Debian-style distro, then be 
aware that the default configuration is significantly different 
from the one shown on these pages. In particular, there is an 
entire directory (/etc/aide/aide.conf.d) containing more 
than 100 configuration snippets that are automatically 
concatenated into a single configuration file (/var/lib/aide/ 
aide.config.autogenerated) by the script update-aide.conf. 
This is a Debian extension that makes it easier to update the 
AIDE configuration when new packages are installed. 

| compared my test installation on Ubuntu with the one 
| carried out on CentOS. | discovered that the Ubuntu 
configuration is thought out in much more detail. In particular, 
there are several attribute groups intended to handle log files. 
These present an interesting challenge to AIDE because they 
routinely grow, and during log file rotation they also get 
renamed and perhaps compressed. 

Please remember that intrusion detection Is a reactive 
rather than a proactive approach to security. It is absolutely 
not a replacement for keeping all of your system safe and 
secure in the first place! 
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/ software on the planet 





tPicks 








Richard Smedley 

FOSS activist, Richard tramps the 
muddy fields of the interweb with his 
trusty SMED5000 and detects another 
hoard of open source treasure for you. 


LibreOffice }) KeePass >> codemisc >> Xnee >> IPCop >> tk-yupana 
»» haveged >» VMS Empire >> Fuego >> di >> Ack 





Heavyweight Office Suite 


LibreOffice 


Version: 4.2 Web: www.libreoffice.org 


ooking at the utilities listed at a 

glance above, some will be 

unknown to you, featured 
because they deserve wider circulation. 
LibreOffice (LO), we're fairly confident, 
will not be unknown — so why has it 
earned prominent space in the pages of 
HotPicks? Simple, most people tend to 
run the version that shipped with their 
distro, until they upgrade to the next 
distro version. But development of 
office suites, like web browsers, is 
becoming faster, with incremental 
releases containing several small but 
useful improvements, any one of which 
could make a big difference in your 
working day. 









U 

Firebird SQL 
HSQLDBis still the default, but 
a Firebird SQL connector 
appears as an experimental 
feature for future migration to 
this speedier back end. 





171} 
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® 
Calc 
It's Calc that has seen the 
greateset number of 
improvements, from Excel 
compatible functions to big- 
data handling abilities. 













Stats all folks! 


Calc also gains improved 
statistical functions, and even 
a random number generator. 
Spreadsheet geeks rejoice! 
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se 171 The Silver Searcher 


& 

Import and export 
While we continue to be unhappy to 
get everything in docx format, at least 
we know that LibreOffice is handling 
import and export better than ever. 





Functions | Structure| 


Category 













FIUTERXML 
FILTERXML{ XML Document. XPath expression } 


Apply an XPath expression to an XML document 


Function result 0 
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Even if you write your documents in 
LaTex, you'll still be likely to fire up an 
office suite to open the inevitable docx 
attachments sent your way by 
unenlightened colleagues. This release 
of LOsees several improvements in 
interoperability, with the Redmond 
Standard (filling a whole page of the 
release notes) as well as import/export 
improvements with MathML, PDF, 
AbiWord, SVG and Palm ebook, and 


“The experimental 
features in this release 
are worth a closer look.” 
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Don't delay, upgrade today 
Don’t wait until you upgrade your distro 
before you upgrade your office suite - 
with so many improvements, and an 
easy install, it's worth upgrading now. 
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> Extra functions in Calc combine further Excel 
compatibility with genuine usefulness. Probably. 


legacy Mac formats. Style 
improvements infuse everything from 
improved integration to menus in 
Gnome 3, Mate and Xfce, through 
overcrowded tab collections in 
dialogues wrapping evenly onto a 
second line, the new default template 
designed especially for Writer and the 
space-efficient redesign of the start 
screen. Naturally, there's now the 
option of a flat icon set (Sifr). 

Calc sees improved statistics 
functions, a random number generator, 
and more than 20 added spreadsheet 
functions for MS-Excel interoperability. 


Speed demon 
Although many are disabled by default, 


the experimental features in the latest 
release are also worth a closer look. The 
Firebird SQL connector for BASE is 
staggeringly fast compared with 
HSQLDB 18, as it avoids the C++-to- 
Java overhead. 

Some time over the next few 
releases, HSQLDB will be phased out in 
favour of Firebird, so this is our chance 
to get a head start on migration. Live 
data streaming is the other headline 
experimental feature. 

Add in performance improvements, 
locale tweaks, CMS integration, an 
Expert Configuration window, and a 
simplified scripting API bundled in for 
BASE, and perhaps you shouldn't be 
waiting until the next time you upgrade 
your distro before you see an upgraded 
office suite. 
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Secure password manager 


KeePass 


Version: 2.25 Web: http://keepass.info 





stDatabas 


Specify the composite master key, which will be used to encrypt the database. 


A composite master ke my connie one or more of the following key sources. All sources you 
a will = require ato open the database. If you lose one source, you will not be able to open 
e 





Vv Master password: OEE tober iat oe 
Repeat password: 
Estimated quality: 147 Bits 


! Key file / provider: 


Create a new key file or browse your disks for an ening one. If you have installed a — 


different passwords, many people 

Simply use the same one on every 
service that they use — thus if one of 
their services is compromised (not 
unknown, when so many web apps we 
try are from start-up companies, with 
one technical founder having to deal 
with security as an afterthought), 
you ve just handed your banking 
password over to unknown baddies. 

Some people manage complex 
mnemonic-based systems to provide 
long mixed passwords individual to 
each service, but few can see such a 
system through comprehensively. So, 
how to keep long passwords, individual 
to each app or service, save them 
securely and have them ready to hand? 
Enter the password manager. 

KeePass is built on mono (or .NET if 
you install it on a Windows machine) so, 
providing you already have the 
appropriate libraries (which you should 


| n despair at remembering 50 


Fun command-line utils 


Codemiscs 


Version: 2014-02-10 Web: http://bit.ly/InmJC7s 


odemiscs is a “collection of 

exciting, creative, amusing, and 

innovative commands,’ you 
read. “It is intended to be fun and 
useful.” OK, you wonder, so what does 
that mean? 

“It includes a command wrapper 
(cmd), project generator (mkproject), 
human language translator (tw), feed 
reader (rf), images wizard (imgs), 
colorizer (colorize), slowed down 
echoer (typewriter), and shell show 
(show). Right, then, let’s try them out. 
Install (as per website instructions) is 
painless and quick. Running doc/demo 
shows you what's included, to a certain 
extent, but you have to run the 
commands a bit more to begin to 
appreciate them. 

Many of the scripts call common 
command-line utilities, such as 
fortune-mod or lynx, and will tell you 
when you run them whether you're 





do if you have Gnome), follow the links 
from the website to unofficial packages 


provider plugin, itis also listed in this combo box 


T Windows user account 


25 data 


for your distro, or the source package. Windows 
We grabbed the deb from Sid, which will 
have made it through to Debian testing 
by the time you read this, and it APT 
updated our mono installation for us 
along the way. 


Us oa sre 
ee sucha 
ie. ‘oot 


Secure encryption 

Start with a strong master password, 
which KeePass SHA-256 encrypts for 
you. Good policy, ina shared KeePass 
Set-up (eg, keeping the passwords for 
the company’s accounts), is to use a 
longish sentence, with numbers and 
punctuation where they're not 
expected, then change it each month. 


“Many people use the 
same password on 
every service they use.” 


lacking a needed package. For example, 
after running rf we were told we lacked 
xmistarlet. After installing xmlstarlet 
we were then able to run commands 
Such as: 

rf mozilla-people 
to grab blog feeds, choosing the --link= 
switch for the numbered feed items to 
get the URI. 


Finding meaning 

Tw calls lynx to check one of more than 

4,000 dictionaries — some local, or on 
freetranslation.com, but the vast 
majority from Google Translate. Calling 
tw translate.google.com.cy-en cariad 
for example, will translate a word from 


“There are skeletons for 
Bash, C, C library, 
Python, C++ and Perl.” 


www.tuxradar.com 
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of t ee urrent Windows user. This data does not change when the 
ceounE Dae swor ang 


lost, it will not be enough to ate _a new accoun with the sam 
requir ren Creating a a nd 
niple au don't kno sm how to do this, don't e 


> Before you start entrusting your passwords to KeePass, 
you'll need a secure master password to protect them all. 


You can use a key file as well as 
(or instead of) the master password. 
KeePass 2.25 features mainly auto- 
type improvements, entry attachment- 
handling enhancements, XML replace 
functionality, and various minor new 
features and improvements to this 
award-winning piece of software. 
Passwords can be grouped, and there 
are many import/export format 
options, all of which contributes to this 
app’s ease of use. But portability and 
excellent security would make KeeFass 
a good choice even if it were less user- 
friendly, so features are a pleasant 
bonus in this case. 





> Scripts range from the whimsical to the useful, but all are 
worth a read through the source. 


the command line far quicker than you 
can walk to the bookshelf to pull out 

a dictionary, or even switch to a browser 
screen and load Google Translate. 

Also in the time-saving help 
category, mkproject makes project 
skeletons; by default, a ‘hello world’ 
project of the selected skeleton that is 
managed with autotools. 

There are skeletons for Bash, C, C 
library, Python, C++, C++ library and 
Perl: but why not add one for your 
favourite language? It’s all the work of 
Juan Manuel Borges Cafio so far, 
though as it’s under GPLv3, we're sure 
contributions are welcome. 
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X11 user-action recording tool 





Xnee 


Version: 3.17 Web: www.sandklef.com/xnee 


ver wanted to record and replay 
Le a user interaction with your 

system, to demonstrate a 
program? Henrik Sandklef’s Xnee is 
probably what you need, but it can be 
used for so much more. Recording and 
replaying can be tied to a key modifier 
combination, making a record and 
replay macro. Xnee can type in the 
contents of a file — eg, to test a blog 
engine, and in automated tests. Xnee 
has a backronym, *Xnee is Not an Event 
Emulator’, as the target X Window app 
iS convinced it Is receiving user input. 

Finally, as well as recording and 
playing back keyboard and mouse 
actions, Xnee can distribute them 
beyond a single computer, making it 
useful for a classroom demonstration, 
or even in remote learning. 

We downloaded and unzipped the 
source tarball and ./configure told us 
we needed to 

apt-get install libxtst-dev 


to add the missing X11 extensions: 
RECORD and XTest. This done, we 
compiled with 

configure --disable-doc 
to save installing Diaand TexiZHTML. 


Many parts 
Xnee consists of a library, two 
applications and an applet for Gnome 
users: 
»» cnee — command-line program 
»> gnee — graphical user 
interface program 
») pnee — a Gnome panel applet 
» libxnee — library used by Xnee 
and gnee 

Cnee, called from the command line 
and with enough options to make a visit 
to the manpage mandatory, will 
probably be more use to you than the 
GUI gnee, but while you make up your 
own mind, here's a quick cnee example. 
Capture with: 
cnee --record --keyboard -o cnee-test01. 


Firewall distro with web interface 





IPCop 


Version: 2.1.1 Web: www.ipcop.org 


or more than a decade, /PCop 
FE has been blocking bad packets 

and helping to keep intruders 
out of your network. It’s a lightweight 
distro to install on an old machine, and 
Sits between your small office or home 
network and the Wild West of the rest of 
the internet. 

If you're currently relying on the 
ADSL router, with or without built-in 
minimalist firewall, that your ISP gave 
you, it’s time to take action. Any old PC 
from the last decade or so will be 
powerful enough to run this distro, 
though if you're using an old piece of kit 
it’s worth configuring a spare to swap in 
when a power supply or disk drive gives 
up the ghost. 


Well connected 


As aminimum, you'll need a network 
card (NIC) to face your internal network 
(via a switching hub) and/or a wireless 
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card, and a card to talk to the internet — 
using either a supported USB ADSL 
modem, or another NIC connected to 
the ADSL router you have. /PCop also 
works with dial-up and 3G connections. 
An extra NIC gives you the possibility of 
a De-Militarised Zone (DMZ) of 
separately restricted access for 
internet-facing servers. 

Download an ISO, burn to CD (or 
USB key — or even floppies), boot up, 
and you're confronted with a curses 
library-based text installation that won't 
look unfamiliar to veteran users of old- 
skool distros such as Debian. As /PCop 
takes over the entire hard drive (you 
won't be dual-booting on a firewall!), 


“If you’re relying on the 
ADSL router, it’s time 


to take action.” 


www.linuxformat.com 











> Although Xnee plays this back by showing you every key- 
press you captured, the recording is just a text file. 


xml 
Type something, random or 
otherwise, and then play it back with: 
cnee --replay --file cnee-test01.xml 
You can see part of the captured file 
— from the key events themselves — in 
the screenshot. Mouse events, too, are 
captured in a similar format — the 
“everything is a file” text-based Linux 
in action. 


“Xnee consists of a 
library, two apps and an 
applet for Gnome users.” 


iIPCOP FIREWALL DISTRIBUTION 


Ce ee oe ee ed 


(ay THE BAD Packets STOP HERE 


o boot IPCop 2.1.1 default installation. 


Press Fi for help and further information, TAB for boot targets list. 


> This splash screen means security is about to arrive, but 
make sure your hard drive is backed up and clear. 


there's little to select, save which 
interface is used for DMZ, and what 
address range(s) you'd like to use 
internally. Within this range, you should 
set up a sub-range for the DHCP server. 
Set up an admin user and you can 
remove the install medium and reboot, 
then connect to https://ipcop:445 
from a browser on your now-protected 
network. Now you can fine-tune your 
set-up, change and review firewall rules, 
administer the VPN options, and check 
the logs and status of your /PCop install. 














Incan abacus implementation 


tk-yupana 





Version: 0.7.3 Web: http://bit.ly/1fOoErs 


he yupana, or Incan abacus, is a 
fascinating puzzle. A bronze age 
calculating machine glimpsed in 
the illustration to a 400-year-old 
manuscript in Copenhagen Royal 
Library, whose mode of calculation has 
become the battleground for several 
competing conjectures. 
Writing in E/ Primer Nueva Coronica 
y Buen Gobierno, in 1615, Felipe 
Guaman Poma de Ayala charts the 
history of Andean people: from the 
creation legends to the rise of the Inca 
empire, until Spanish Conquest — but is 
imprecise on the operation of the 
yupana. You can see the illustration 
from his work in the screenshot. 
Several theories have appeared in 
the last century, since the manuscript 
resurfaced. First, in 1931, Henry Wassen 
proposed a decimal answer, with seeds 
in various positions on the board valued 
at 1, 5,15 and 30, as they increase. The 
overly complex calculations needed for 


this system made it an unlikely answer. 
Emilio Mendizabal, in 1976, looked to a 
Fibonacci sequence of 1, 2, 3, 5, while 
Carlos Radicati di Primeglio, in 1979, 
argued for nine seeds in each box. The 
1981 solution of English textile engineer 
William Burns Glynn was a single unit 
per seed, base ten, with the last column 


“memory’, where you can temporarily 


place ten seeds about to become a unit 
on the next row. 


Astronomical tool 

In 2001, Italian engineer Nicolino de 
Pasquale combined Fibonacci with 
base 40. De Pasquale has bolstered the 
claim for base 40 by suggesting use of 
the yupana as an astronomical 


“The manual is a model 
of clarity and goes into 
fascinating depth.” 


Unpredictable random number generator 


haveged 


Version: 1.9.1 Web: www.issihosts.com/haveged 


erhaps randomness is not a 
P Subject that has greatly troubled 

you in your computer use, but 
you rely on it for security — and it may 
not be random enough. 

As haveged coder Gary Wuertz says, 
“all randomness is ultimately traceable 
to a hardware interrupt’. This being so, 
the kernel has to pool different events 
to generate enough “entropy”, but as 
this is most heavily weighted towards 
user interaction from keyboard and 
mouse, your servers may not be 
providing enough randomness for you 
to be happy with what's being used in 
TLS/SSL protocols, TCP sequence 
numbers, and cryptographic uses. 

Haveged generates an unpredictable 
stream of random numbers “harvested 
from the indirect effects of hardware 
events on hidden processor state 
(caches, branch predictors, memory 
translation tables, etc), using the 





HAVEGE (Hardware Volatile Entropy 
Gathering and Expansion) algorithm”. 


Random but organised 


Installation is easy (configure, make, 
make install), as there are few 
dependencies, and the utility is written 
in C, with a little assembler for some 
hardware-specific tasks. 
Documentation is extensive, and the 
man page gives examples of haveged in 
use, the (truly) random password 
generator being one you might want to 
add to scripts for setting up new users 
on your system, though they won't 
thank you for having to remember 
“F&SIIN.;Ci:*#dFY” before they can log 


“haveged generates an 
unpredictable stream of 
random numbers.” 


www.tuxradar.com 


LXFHotPicks 





>) From 400-year-old illustration to a conjectured working 
abacus — maths, history and anthropology in one. 


calculator. The first departure from the 
positional numbering system for the 
additive, or sign-value notation, is Cinzia 
Florio's 2008 proposal that the abacus 
is a board for making multiplications. 

The arguments continue, but you 
can try them all, thanks to Kunturweb’s 
tk-yupana. Written in the Tcl language, 
tk-yupana will enable you to try addition, 
subtraction and multiplication in each 
implemented theory. 

The 100-page manual is a model of 
clarity, goes into fascinating depth on 
the mathematical side, and provides an 
introduction to the Incas. 





> Feel secure: haveged gives you real randomness — not 
just useful, but essential in encryption. 


in! Other uses include a secure disk 
erase, which should be less time- 
consuming than several passes with 
shred, and generating lots of data — 
handy for testing your data-driven apps, 
particularly for speed and efficiency. 

If you don't need this much 
randomness, it’s still worth reading the 
website for insights into how what's 
going on at the bare metal level can be 
collected and used in programs such as 
this, and the unintended consequences 
of compiler optimisations which 
undermine the original collection 
sequence in the program. 
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LXFHotPicks 


Tum-based, command-line, command and conquest 


VMS Empire 


Version: 1.1] Web: www.catb.org/~esr/vms-empire 


ere’s one from the vaults. 
VMS-Empire is based on 
Walter Bright's original 


Empire program, from which all the 
multiplayer 4X simulations out there, 
from Civilizationto Master Of Orion, 
are descended. 4X? That’s expand/ 
explore/exploit/exterminate. It was 
actually in TOPS-10/20 FORTRAN on 
the PDP-11 before appearing on 
DEC's VAX/VMS in the late 70s. This 
code, ported to C and released in the 
mid 80s, was rewritten by Eric S 
Raymond for *nix, and named VMS- 
Empire to show its origins. 

Fast forward four decades, and 
Raymond is still fixing bugs and 
putting out maintenance releases. 
Both the download and the binary — 
produced after a simple make — are 
less than 100k, so you should 


Go playing engine 


Fuego 





Version: 1.1 Web: http://fuego.sf.net 


S Rodney William Whitaker 
Said, “Go is to chess as 
philosophy is to double-entry 


accounting’. The venerable game of 
Go has a history in Al research 
almost as long as computing itself — 
thanks to its simple rules (two 
players take turns to place stones on 
a grid to control territory), but 
complex strategy. Even today’s 
Supercomputers cannot brute-force 
a win against a master, so it’s a real 
testing ground for Al algorithms. 
Tree searches with selective 
pruning were used in early programs 
(such as GNU Go), but neural 
network research, while promising, 
has never reached a breakthrough 
stage. Monte Carlo Tree Search, with 
Upper Confidence bounds, is the 
strongest programming strategy at 
the moment, and that’s what you get 
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certainly have room for this, however 
old your PC. Play is you against the 
computer, with both of you as emperor 
or empress starting out unaware of the 
whereabouts of the other. 

You start with very little idea of the 
large map on which you play, and the 
territory may consist of islands, water, 
and much to confuse you until you have 
played through a couple of times. 





> Like most 
empire builders, 
you start small, 


Whether you find your opponent edging through 

quickly is down to chance, so your the dark to find 
your enemy 

forces may not be so evenly matched ee 

when you meet. All of this uncertainty destroying them. 


means you have to put time into 


“Raymond is still fixing 
bugs and putting out 
maintenance releases.” 





developing strategies with different 
sets of tactics for different situations, 
and may find you've spent more time 
playing than you planned! 

For added interest, enter ++ to 
get into debugging mode, then % to 
watch the show as the computer 
makes its moves. You can get to 
understand the computer's 
algorithm for choosing its moves — 
not that we'd suggest you then use 
that knowledge to your advantage in 
the next match. Perish the thought... 


Fuego vs. Unknown (B) 


File Game Program Go Edit View Bookmarks Tools Help 


2S @GR @@ 


here, embodied in a large collection of 
well-documented C++ libraries. 

On our Debian testing box, we 
installed the GoGU/ board first (unzip 
and sudo ./install.sh), then untarred 
Fuego and ran the usual configure, 
make, make install, pausing to install 
various missing libboost libraries 
highlighted by the configure script... 
painful, as there is a not altogether clear 
choice between many libboost libraries 
in Debian. The RPM went painlessly and 
quickly onto Fedora 20, pulling down all 
of the necessary libboost packages in 
just the way the deb package should if 
it's available by the time you read this. 


“Go is to chess as 
philosophy is to double- 
entry accounting.” 


www.linuxformat.com 





uP Ge 


> To play against a human, such as yourself, Fuego needs 
a board that speaks GTP: here, the Java-based GoGUI. 


Open GoGU/, select Fuego as the 
engine, and you're facing a strong 
opponent, with just enough 
aggression to keep you on your toes. 
Over time, it doesn't reveal the 
sameness that made earlier 
implementations of GNU Go so easy, 
though you may want more variety of 
opponents — still, a great offline 
choice for those far from their local 
Go club, and a fascinating set of 
libraries if you want to delve into the 
Al programming side of things. 








Disk information utility 


ci 





Version: 2.4.5 Web: www.gentoo.com/di 


rying the codemisc commands 
earlier in this colum, you'd have 

noticed how great it is to just 
type (and remember) two-letter utility 
commands, as with the familiar Is, In, 
du, et al. Di — disk information — is 
a handy little utility that improves on 
the familiar df command, to give you 
more information, and filtered the way 
you like. 

With a two-decade history, past 
versions have been ported to BeOS, 
Cray, and OS/2, and it continues to be 
very portable — this release contains 
updates for Irix, and runs on just about 
every *nix, as well as Windows. 

In use, di proves its worth by 
defaulting to human-readable 
information (ever aliased df to do that? 
Didn't you wish you could just config it 
to do that permanently”). It also 
adjusts to user quotas, where 
applicable, giving a personal disk 
reading for each user who calls it. 





Options include CSV output (-c), 
great for scripted use to snapshot your 
system, and skipping the header (-n), 
which also clears an unwelcome line for 
many scripts. 

di -fm 

uses the -f option to “use format string” 
and the mount point suboption, thus 
displaying only mount points. Whatever 
output you want, di — it seems — is 
flexible enough to provide it. 


> Flexibility 
from -l and -x 
to include the 
filesystems you 
want, to default 
human-readable 
values and csv 
output options. 





Text search utility 


Ack 





Version: 2.12 Web: hitp://beyondgrep.com 


ast month, we covered grep, with 
L added Perl regular expressions, 
So this week it seems fair to 
delve into grep’s Perl-based rival, Ack. 
As it’s hosted on a website named 
betterthangrep.com, there’s not much 
doubt about the author's feelings on 
the matter, and tests show that in most 
cases Ack is significantly faster. This is 
partly down to Perl regular expressions, 
and partly because of Ack’s way of 
whitelisting file types, and ignoring 
those it doesn't understand — list those 
it does with: 
ack --help-types 
While it’s easily installed via CPAN, 
for those who don't spend much time 
in a Perl environment, a neat little 
single-line install is provided to give 
a local copy for an unprivileged user: 
curl http://beyondgrep.com/ack-2.12- 
single-file > ~/bin/ack && chmod 0755 
l#:3 








You can also just use your package 
manager — note that Debian-based 
distros package ack as ack-grep, 
meaning you must call it as ack-grep, or 
rename it with: 

dpkg-divert --local --divert /usr/bin/ack 
--rename --add /usr/bin/ack-grep 

Use like grep, or grep -P, and enjoy 

the speed. 


ie lL. 
richard@riv.. ™ richard@riv.. ™ richard@riv... x 


> Use like grep, 
but get recursive 
search — and 
blazing speed — 
for free. 


www.tuxradar.com 








LXFHotPicks 





New and updated software that 
also deserves a look... 


xwax 1.5 

Digital Vinyl System controlled via 
turntable and timecoded vinyls. 
http:/ /xwax.org 





>» Combine digital tracks with 
turntable control, thanks to xwax. 


MooseFS 1.6.27 

Fault-tolerant, network-distributed 
filesystem with POSIX file attributes. 
www.moosefs.org 


by Snort 2.9.6.0 

Network intrusion prevention and 
detection with signature, protocol, 
and anomaly-based inspection. 
www.snort.org 


by (R)?ex 0.44.4 

Allows you to manage all of your 
servers from a central point. 
www.rexify.org 


b) Dada Mail 6.8.0 

Mailing list manager for verified, 
closed-loop opt-in subscriptions. 
http:/ /dadamailproject.com 


b) Erebus 0.13 

2D classic point 'n’ click style RPG for 
Linux/Symbian/Android. 

http:/ /erebusrpg.sf.net 


) tvpvrd 4.50 

Schedule and manage multiple 
analogue TV capture card recordings. 
http://sf.net/apps/mediawiki/ 
tvpvrd 


b) Linux on Android 2.7.2 

A chroot environment on Android, 
running everything from Arch Linux 
to Slackware. 

http:/ /linuxonandroid.org 





> Your favourite distro running 
chroot on your favourite phone. 


May 2014 LXF183 |63 





LINUX 


forfree Software’ FORMAT 


Product code: 
LXFDB0182 


In the magazine 
Fed up of being tracked 
online? We show you 
how to take control of 
your online privacy. How 
the Raspberry Pi was 
made — an exclusive 7 é 
visit to the Pi factory, DVD highlights 
plus Pipelight, anintroto Tails Live, Tiny Core, Netrunner 
Gentoo and OCaml. (64-bit) and so much more. 





Product code: 
LXFDBO179 


In the magazine 
Continue the new year 
with a freshly installed 
Linux, configured just 
the way you want it! 

We also look to the 
future of gaming on . a 
Linux and round up the DVD highlights 
best open source video Ubuntu 13.10, OpenBSD 5.4, 
editors around. HotPicks, code books and more. 





To order, visit 





Panda The top 5 VoIP clients SQ 
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Product code: 
LXFDBO181 


In the magazine 
Pete Lomas gave us an 
exclusive look into the 
birth of the Raspberry 

Pi and we gave you the 
ultimate guide, we rated 
the Penguin Wee 4th 2 . 
Gen and Tails 0.22, plus DVD highlights 
we checked out the best — Linux Mint 16 with MATE & 
VoIP clients out there. LXDE, Fedora 20, plus more! 
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LXFDBO0178 





In the magazine 
Join the in crowd, 

with our feature on 
crowdfunding, marvel as 
we peer inside Qt, pick 
your own beginner's 
distro, and find out what 
Robert ‘rOml’ Lefkowitz 
has to say about open 
source software. 





DVD highlights 
Pinguy, Elementary OS Luna, 
tutorials, HotPicks and more. 


Select Computer from the Browse Magazines list and then select Linux Format. 


Or call the back issues hotline on 
or for overseas orders 
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In the magazine 
Is the latest release 

of Mint 16 enough to 
make you switch? 
Discover how to expand 
your Raspberry Pi, we 
investigate equality 


and the open source DVD highlights 


community. And explore OpenSUSE 13.1, Clonezilla 2.2.0, 
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Uncover the next 
generation of open 
source mobile OSes 
in Ben Everard's last ten 
feature for LXF. Go 2 
inside Project Sputnik: ts 5 

Dell's Ubuntu laptop and DVD highlights 
discover the programs LXLE, OS/4 OpenLinux, Grml in 
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fe likes Open Data, but 
= wonders what the 


he UK government gets 
- only ten requests a year 
for burials at sea. This and 

the fact that the executive 
director of the Digital 
Government Service likes to 
attend meetings at Number 10 
wearing shorts, were among the 
intriguing titbits | learnt at a talk 
about the development of the 
award-winning gov.uk portal. 

You can read about gov.uk’s 
guiding principles here (http:// 
bit.ly/Pjn789), and after all the 
months of documents spewing 
from the Edward Snowden folder 
it's refreshing to hear about a 
government initiative that made 
openness and the needs of the 
user central to its design. It’s 
mind-boggling achievement too, 
which manages to draw over 300 
separate government agency 
websites into one place. 


Baby steps 

We can’t go back after the 
Snowden revelations though. 
Greater transparency and 
accountability from government 
has to happen and while we're 
waiting for the Coalition to stop 
bickering over an Intelligence and 
Security Committee revamp, 
we're beginning to see baby 
Steps in the right direction. For 
instance, as Michael Meeks 
mentions in his column (p8), the 
government appears close to 
adopting the Open Document 
Format (ODF) for all documents. 
This will make swathes of data 
highly searchable, assuming, of 
course, its ever released. 
chris.thornett@futurenet.com. 


oa 7 government’s bought 
Yaa for £24,999 recently. 
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LinConnect................... 
Neil Mohr introduces us to the 
handy tool that lets you receive 
notifications from your Android 
phone on your Linux desktop. 





Create a Ghost blog... 
Make your mark on the internet by 
creating your own custom blog. 
John Lane shows you how to 
accomplish this with Ghost. 


CODING 


ACA DEM YS 


L programming section 


TESS csccescascnrercasnes 


Carl Fletcher gives a complete 
guide to mastering OpenSUSE, with 
hints and tips for all parts of the 
popular distro. 





Create your own Arduino-compatible 
circuit board for less than the price of 
a cup of coffee with Shrimp. It 
Richard Smedley shows us how. 


Job scheduling............. 


Save time by getting your PC to run 
and complete tasks automatically. 
Neil Bothwick shows us how, with 
cronand at. 





Hardened servers........ 
Kent Elchuk takes us through the 
process of creating our very own 
advanced home server on almost 
any device we have going spare. 


\, Whether you're a beginner or 


J 


)/ a guru, learn new skills in our 





In this issue... 


HTML5 


Host video content on your 
website with your very own 
configurable player p84 


JavaScript 


www.tuxradar.com 





Wave goodbye to repetitive tasks 
and streamline your workflow 
with Grunt p88 
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LinConnect Bring mobile notifications 
to your Linux desktop with a handy app 


Android: Linux 


Who's that calling? What's that alarm? Neil Mohr is sick of people pestering 
him on his phone, time to hack in desktop notifications. 








Chrome Web Store - MightyText - SMS Text Messaging from Computer - Chromium 


pve... @ Getting Started {2 Imported From Fir... [J rrbciogos () News @@ BBC - Radio 6 Mu... Linux Mint Community 


‘a MightyText - SMS Text Messaging from C. 


«eke $55 S 


OVERVIEW DETAILS REVIEWS RELATED 





Text from Chrome! Sync'd w/ Android 
#. SMS & Texting like Google Voice. See 
our YouTube demo, instant 
notifications like Gmail app. 


Neil Mohr 
Loves his Google 
Nexus 5 like 

he loves a good 
chocolate torte 
and a good 
whiskey in the 
evening. His wife 
worries. 


>) Browser add-ons offer handy ways to integrate Android. 


There are many times though when that’s not good 
enough. The phone could be in another room, you might have 
it set to silent or you could have donned industrial ear 
protectors to drown out the drawling of your work colleagues. 








ntil we're carrying around phone devices that are It’s at these times that you need some sort of smartphone to 
running full desktop Linux — and those days aren't desktop communication. Enter LinConnect a smart little 
too far off — there's always going to be a divide Android app that can bring all of your phone notifications to 
between our phones and our desktops. In many ways that’s your Linux desktop. 
not actually a problem, as we presume most of us sit there How does this magic work? As you might suspect it’s a 
with our phones on our desks. So when a call comes in, an client-server system that runs over your local network. 
alarm goes off or a calendar event springs up, we can spy the = (See the walkthrough opposite on page 67) Before trying 
flashing, beeping device or hear it playing the Crazy Frog LinConnect out you should read the warnings that this is still 
theme — as we're so 2005 it hurts. alpha software. When we installed the Android app the 
change log had a number of entries that said a full reinstall 
ee +o e ‘cianaaiiates = would be required and all settings would be lost. So don't 
€ © ¢ 5 192.168.1.71) expect this to be stable at the moment. The fact it works so 
a well, even at this stage, is a testament to how slick it is on the 
fea | = Android side. 


On the Linux server side of things, the installation could 
still do with a little work. As most of the heavy lifting is done 
by a somewhat ropey shell script, but it’s good enough to get 
the job done. LinConnect will also install all the required 
dependencies, install the Python server program and set it up 
to start automatically each time your system starts. The 
author has tested the system on Ubuntu and we were 
running mighty Mint 15 without any major hitches. 

At this point, we were using version 2.13, there seems to 
be little to no customisation on the Linux desktop end of the 
equation. It'll plug into the default desktop notification system 
and use that to pass on any Android notifications. Hopefully 
as this is undergoing some serious development we'll see 
> AirDroid is an excellent way to connect to your Android device. more abilities to tailor the notifications but it’s a start. 


pe eS Re 2) 
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- Tutorial 


notifications 


LinConnect up and running 


pha for Linux - Android Apps on Googie Play - Mozitia Firefox 
ha for Linux - A... %: j C)hauckwilifinconnact-server- Gi. % |  LinConnect Alpha for Linu 


¥ 9) Qe google pia 


LinConnect Alpha for Linux 


Get the app 


You'll want to head over to the Google Play 
Store and search for LinConnect (http://bit. 
ly/LXFlincon) then install it on to your 
chosen Android device. As the app is in alpha 
it’s free. You should also hook up your device 
to the local network. 


Help 


aie lace 
‘a Zens. ,/ nconnect-server 





2) Manual dependencies 

The required Python 2 dependencies are: 
sudo apt-get install -y python-pip python-gobject 
git libavahi-compat-libdnssd1 gir1.2-notify-0.7 

You'll also need sudo pip install cherrypy 

pybonjour and change the default port via 

the ~Z.config/linconnect-server/conf.ini file. 


Chromium to text 


% 1% LinConnect Aiphe for Linux A. & | C) hauckwillfinconnect-server Gi... ® iS LinConnect Alphis for Uinux- A. 3 ;*) 


OP ei. 


githud.com * 2.57. gooule olay linconnect. 
Terminai 


i fie Edit View  Searc! 





© Get the server 


You'll need to get the desktop package: 

wget --quiet https://raw.github.com/hauckwill/ 
linconnect-server/master/LinConnectServer/ 
install.sh && chmod +x install.sh 

Run the script with sudo ./install.sh. 


im MR Tp Ore) aay seit 


Step 1: Download server on desktop 
Tap here to share the download URL 


Step 2: Enable notification service 
Tap here and select LinConnect 


STEP 3: SELECT SERVER 


Custom IP address 
192.168.1.79:9090 


ixf-X200 
192.168.1.79:9090 


5 Get LinConnected 


Back on your device you'll need to connect 
LinConnectto your new LinConnect server. 
First enable the app to capture notifications 
from Android. Next select the server your 
device should connect to, you're able to enter 
a manual IP and it defaults to port 9090. 





% (2s LinConnect Alpha fer Linux. A. ® £ ©) hauckwililinconnect-server - Gi... ® }\ tinConnect Alpha for Linus A Mia we 
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Reinstall or upgrades 

lf the script encounters any errors, it'll panic 
and fail, which leaves you having to install 
dependencies manually. It'll also fail if it 
encounters the ~/linconnect folder already 
exists. So you should rm -f -r ~/linconnect to 
remove it and make a future reinstall easier. 


2 notifications 
e Lats bas) 6 (2 minutes ago} 
Notification server started 


Configuration instructions at http:/fiocalhost:9090 


mm ng.33.0c 
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7° - Mostly Cloudy 3 cards (via Google Search} 


Clear notifications 
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(5 Notification time 

Once connected you can tap the server entry 
on the device to fire off a test notification, but 
otherwise any Android notification will appear 
on your Linux desktop. In the app, the Enable 
applications option enables you to add and 
remove apps from notifications. 





It's not quite in the same arena as bringing 
Android notifications to your Linux desktop but 
there are a host of browser-based services that 
tie into your various phone services. 

One such service we use a lot is Mighty Text. 
This consists of an Android app [http://bit.ly/ 
LXFmighttxt] and a Chromium browser plug-in, 
which together enables you to receive and send 
text messages from Chromium. It’s something of 





a revelation being able to type out and reply to 
text messages on your desktop. It also suddenly 
makes texting far more useful. Another 
advantage is if you receive security messages, as 
these now appear onscreen rather than on your 
mobile. Though we do worry about man-in-the- 
middle attacks — just how secure is it? 

Another fantastic little app that’s worth a try is 
Air Droid [http://bit.ly/LXFairdroid]. This is a 


www.tuxradar.com 


more general Android device manager that 
provides a funky web-based interface within 
your browser. Just fire up the app and tap the 

IP address it offers into your browser. Both the 
phone and desktop have to be on the same 
local network to work. It provides a virtualised 
front-end for your phone so you can easily 
transfer files, access photos and control aspects 
of it like the camera. 
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OpenSUSE Add repos, fix graphics and 
wireless and access loads of sofware 


penSuSE: A 





Carl Fletcher charges to the rescue with a cry of “SUUU-ZAAAA! and shows 
us how to get the open distribution fighting fit for action. 





Carl Fletcher 
isa SUSE 
Knowledge 
Partner and admin 
on the OpenSUSE 
Forums. He also 
supplies Linux 
solutions to the 
workplace and 
home, web design, 
systems admin 
and networking. 


Fil Configuration Dependencies Options xvas 


Software Manager 
This tool lets you install, rem 


epositories 
All repositories 
BM, @syster 


W 





hile the fundamentals of GNU/Linux are the same 
across the board. The immediate post installation 
experience across the range of distros can vary 


greatly. As the name suggests, OpenSUSE is ‘open, which 
basically means it doesn't ship with non-free, proprietary 
software or libraries. To some, that’s a good thing, others 

though might find it frustrating to say the least. 

Though we will offer some installation tips for to you 
consider, this tutorial is not an installation guide, rather it’s a 
post installation, configuration and maintenance guide that 
will have OpenSUSE running in such a way as to be able take 


ove, and update applications, more 





> Vendor switching in the Yast2 UI is a vital part of the multimedia process. 
Here you can change repos and switch installed packages to the new repos. 
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on any challenge. Installing OpenSUSE is much like any Linux 
distribution. Apart from the fact that it defaults to a separate 
/home partition here are some key points to consider are: 
Always download the distribution from the official source, 
which is http:/ /software.opensuse.org. 

B® If possible, use BitTorrent for the download. 

Always check the MD5SUM of the downloaded ISO. 

£9 Using a USB stick rather than a CD/DVD makes 
installation quicker. 

Run the Media Check from the boot menu of the USB or 
CD/DVD. 

[J The DVD gives you access to other options, such as a few 
desktop environments like Xfce and LXDE. 

Following installation the recommended procedure is to 
install all patches. This can best be achieved by opening a 
terminal and running. 

su - 
zypper patch 

Let it run, then do it again, then reboot the machine. 
Please note the use of su - ,instead of sudo which is used by 
the likes of Mint and Ubuntu, though is the same as Fedora. 
The zypper patch command we used means the system will 
be updated. Before we proceed with the main part of this 
tutorial, we think it's worth pointing you in the direction of the 
OpenSUSE forum as a source for more help from the 
community — https://forums.opensuse.org/forum.php. 
Aside from speaking directly to people, the forum has a 
wealth of information that may help you with installation, 
which we're not covering in any detail here. 


Working with repos 

The default repositories for OpenSUSE contain a vast array of 
software. For some this can be sufficient, however the 
majority of users will want to achieve a better multimedia 
experience. For legal reasons, multimedia repositories have to 
be added by the end user, we explain more about repositories 
in a moment but before we add anything, let’s explain some 
important ground rules: 

» Add repositories sparingly (As few as possible). 

» Don't use the VideoLan (VLC) repository along with the 
Packman repositories. 

» Avoid the use of OneClick installers. 

At the time of writing, the current OpenSUSE version is 
13.1 and with each release will be a forum blog post giving 
step by step instructions for multimedia. The current blog can 
be found here: http://bit.ly/logle2d or also here: 
http://bit.ly/1lmVj5Bp. 

Currently, and it has been the case for many years, the 
principal source for multimedia apps and libraries is the 
Multimedia repo supplied by the Packman project. For DVD 
playback you can also add the libdvdcss repo. Please note, 
libdvdcss is also supplied in the VLC repo, but the 

















combination of Packman and VLC is not recommended. This 
is because VLC and Packman contain conflicting libraries. 
Packman does contain VLC Media Player and it’s also 
possible to use just the VLC repo without Packman, but this 
will severely reduce the number of multimedia apps available 
to you. 

The Packman repositories can actually be divided in to 
four different categorised directories. Typically and as here, 
we add the complete top directory. And rather than confuse 
you with more information on the VideoLan Repository, we'll 
just leave it as described and suggest you make it a subject of 
enquiry in the OpenSUSE forum — there just isn’t sufficient 
Space to detail it in this article. Here, we'll just focus on 
Packman, as they are the most popular repositories by a long 
chalk The Packman repositories are also mirrored around the 
world, so it could be something you need to consider in 


download speed terms, see the following page for the full list: 
http:/ /packman.links2linux.org/mirrors. 


Vendor switching 


OpenSUSE uses vendor switching to maintain priority for 
updates to a particular repository (which is sometimes 
referred to as vendor stickiness). It might sound stupid or 
tiresome, but it’s actually a very useful feature that deals with 
a situation where there's more than one repository that 
Supplies a particular package. For example, k3b is supplied by 
the default OpenSUSE OSS repo and if we add in the 
Packman repositories, it’s also supplied there. Switching to 
Packman will mean k3b and any other packages with multiple 
providers, will be installed from Packman only. This is an 
important step in having fully functioning multimedia. 

Now let’s run through that process. First, we need to open 
Yast > Software > Software Management and select to View 
By Repositories. Note that the Gnome (pictured bottom, p68) 
and KDE (pictured below) user interfaces look quite different 
from each other, so we've included a picture of each: 

Just occasionally, when applying this switch in Yast, you 
will experience a dependency error, similar to the one 
mentioned earlier when we were working in the terminal. 
Again, if this happens you should look for the Solutions option 
to allow Vendor Change > Packman. 

Keep in mind too, that if you do use additional repositories, 
as many users do and, for example, use the KDE release 
repositories that supply the latest stable KDE builds, you'll still 
need to follow the same switching method. You will, however, 
need to re-apply the switch on Packman as the last step. 

Congratulations, you have now completed the main steps 
in setting up multimedia in OpenSUSE. Remember though, 
this is just a good foundation, there are hundreds of other 
applications in Packman that can just as easily become a part 
of your installation. 

We have already stressed the need to keep your repository 
numbers to a minimum. However, once you become more 
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guide 


experienced, the possibility of using some community 
repositories from the OpenSUSE BuildService (OBS) is 
something you could consider. 

A standard and popular set of community repos are 





per 


lf your Broadcom 


available by opening Yast > Software > Repositories and after device ent 
clicking Add, followed by the community radio button you will supported by b43, it 
see a list with check boxes. Some people stumble upon this we be supported 
option and decide to select them all, thinking that the more BY WL Ts anny 

; , is available in 
will surely be the merrier and we advise that this certainly fee Pe cucn 
isn't the case. repository. There's 

A much deeper range of repos can be seen here: also a guide for this 
http://download.opensuse.org/repositories. That's the here: ittp://bit.ly/ 
LXFBroadcom 


top level of selections available. If you drill down to here: 
http:/ /download.opensuse.org/repositories/home you 
can see the repos of individual users, these could be 
compared to the PPA system familiar to Ubuntu users. 

Typically though, if you want to find software that isn't in 
the default repos + Packman range we encourage as 
standard, you might want to start your search here: 
http:/ /software.opensuse.org/search. 

This search function supplied by OpenSUSE is powerful 
and very useful. However, it needs to be used with some care. 
We particularly discourage the use of the ‘OneClick’ option 
that becomes available to you. If you are unfamiliar with the 
OpenSUSE BuildService repositories, it is usually better to 
ask in the forum or on the IRC channel before diving in. 

The main problem with OneClick installers is they can: First, 
add duplicates of the default repositories; second, subscribe 
you to repositories you might be better not being subscribed 
to; and third, they can also pull in the installation of software 
that you didn't actually request and are not dependencies of 
the software that you were trying to install. That being said, 
they can work adequately, but need to be used with some 
caution and with a reasonable understanding of OpenSUSE 
software management. 
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> For KDE users, the Qt vendor switching interface is a little different to Gnome’s, 
but it follows the same method of selecting, switching and applying changes. 


If you missed last issue Call 0844 848 2852 or +44 1604 251045 
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a Managing graphics drivers and getting wireless working 
a has to be one of the most talked about parts of getting any 
Linux system up and running. The system default graphics 
drivers should allow you to install and update your system 





Ae ses) 


YaST can also work 


out of the X display adequately. Remember, once you have run the initial updates, 
with a Neurses text reboot to be sure you are now running from the latest kernel. 


based interface. The standard way to install the open source drivers for your 


ATI or Nvidia graphics hardware is: 

Go to the repository manager: Yast > Software > Software 
Repositories > Add > Community. 

BD) Select either Nvidia or ATI as appropriate for your system 
and then click OK. 

Next open Software Management and, in most cases, 

the video drivers will have been auto selected for installation. 
We suggest you review the Installation summary before 
accepting the changes. 

3 Proceed with caution if you have to manually select the 
driver, or if you know your hardware to be in any way unusual, 
for instance, hybrid graphics. 


Get wireless working 

OpenSUSE is much like any of the mainstream distros, 
except, of course, those that contain proprietary drivers either 
on their installation media or in their default repositories. 
Proprietary drivers are available for OpenSUSE, but they must 
be added/enabled by the end user. As you will be aware, open 
Support for your wireless device is influenced greatly by your 
kernel version. If you run a Linux distribution live and the 
wireless works, it’s time to smile. 

It's not possible to address all wireless devices in this 
article, but the OpenSUSE forum has a wireless sticky here: 
http://bit.ly/Nzx6VC. 

For those with Broadcom devices, there’s support 
information here: http://bit.ly/IngPqPW. If your device is 
supported by b43 and you have an active Ethernet 
connection you can install the 643 firmware with: 

sudo /usr/sbin/install_bcm43xx_firmware 

Once the firmware installer completes, follow this with: 
sudo /sbin/modprobe -rv b43 
sudo /sbin/modprobe -v b43 

These two commands remove and insert respectively the 
b43 module and just facilitates the driver coming to life. The 
alternative is to reboot. 

All the above though, should leave you with a functional 
machine. This completes the multimedia, software and 


drivers section, and we move on to the day to day 
maintenance issues. 

Once you have your system running nicely it’s easy 
enough to keep it updated. All the desktop options (Gnome, 
KDE, Xfce, LXDE) have updater back-ends that look after this. 
Only KDE has a proviso in that Apper, its package manager, 
has been known to ignore the vendor switch, so watch out for 
that. Alternative options exist for updating and one of the 
easiest methods is to use your terminal. The following will 
update your system and can be used on all desktops: 

su - 
zypper up 

Using a terminal might not be the most glamorous route 
to updates. It is though to be our first recommendation, as it 
eliminates any complications that some patches cause with 
the built in updater applets, most notably Apper. 


Updates and tools 

Tumbleweed is OpenSUSE's rolling release option. It’s not an 
ideal option for the inexperienced. There’s a forum post about 
using it here: http://bit.ly/1IngSzzf. 

Before you get too excited, don't think it’s going to provide 
you with the latest and greatest. Well it does, but no more so 
really than you can manage with the current release, plus an 
extra repository or two. Actually, you can typically wait longer 
in Tumbleweed for the majority of updates. Having said that 
though, Tumbleweed is a great addition to the OpenSUSE 
range, offering rolling but stable updates. The main portal is 
here: http://en.opensuse.org/Portal:Tumbleweed 

Yast is the acronym for Yet another Setup Tool, which in 
itself is a rather uninspiring description of this useful and 
powerful tool. Don't mistake this for a System Settings tool 
that is designed to tweak the desktop appearance and 
behaviour. Yast is the Control Centre for the root system, 
Starting Yast requires root privileges. Post installation you 
might visit here to configure your printer, Setup Samba or 
Change your hostname and so on (pictured, p/1): 

You can see there is a vast array of options. We've already 
used the Software Manager to do vendor switching and a 
software update. We'll just demonstrate another commonly 
used feature, the firewall. ln openSUSE this is enabled by 
default. Let us imagine though, that we would like to open a 
non-standard port for use with a torrent client. 

Many Linux users do download installation media (ISOs) 
using BitTorrent. For this illustration we've chosen port 





A nice Yast-Qt feature | 


As you can see from the screen on the 
right this is a reasonably straightforward 
process to follow. Before accepting, we 
suggest that you view the changes that 
will take place from the ‘Installation 
Summary’ tab. Note: this method of 
update, performs exactly the same way 
as the zypper up command. 

Other than running your updates 
regularly, there should be little else to 
concern you, just enjoy using OpenSUSE. 
Updates can come thick and fast, 
particularly through Packman. 


The Qtinterface of Yasthas some useful 
and powerful features. Where updates 
are concerned, we thought we'd just 
point one out here. One nice thing about 
the software manager in Yast, particularly 
within KDE, is it’s really easy to see 
exactly what is going on. You can achieve 
a system wide update using: Yast > 
Software > Software Management 
followed by view by repository. Then from 
the menu select Package > All in this List 
> Update if Newer Version Available and 
click Accept. 
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60000, of course we already have that port forwarded in the 
router (but that’s another topic). Adding the port to the 
firewall rules is easy. Follow the route: Yast > Security and 
Users > Firewall > Allowed Services > Advanced (button) and 
add 6000 to both the TCP Ports and UDP Ports fields and 
click OK to apply it. 

Once we apply the changes, the port 60000 is now open 
for TCP/UDP connections. Assuming your router has these 
ports forwarded and your software client is configured to use 
the same port, all should be good. Of course, you can open 
any number of different ports or port ranges. 

This is just a Sample of what Yast can do. If you're easily 
intimidated by command line configurations, then Yast will 
offer a friendlier option, especially if you’re coming from 
Windows. Not all the services are as simple to work with, but 
the Ul has a useful ‘Help’ button in each section to offer useful 
and enlightening pointers should you start to flounder. 





Pre-Installation 
» Test Live: You can use the Live DVD either on optical media 
or a USB to try out OpenSUSE Live with your hardware. Using 
a USB usually makes for a much smoother experience and if 
wireless works in the live session at least you know it’s not 
going to be a problem once installed.Note that the full DVD 
image doesn't have a Live mode, however it does allow 
installation of other desktop options, such as Xfce and LXDE. 
» Partitioning OpenSUSE defaults to using a separate 
/home partition, which is a great way to keep all your user 
files safe. We'd suggest that the best route for partitioning is 
to follow the Custom route. This way you get to manage 
exactly what happens. At the first partitioning screen in the 
installer, choose Create Partition Setup then Custom 
Partitioning (for experts). The partitioner doesn't make any 
changes until the very last step of setting up the install 
process. Be sure to examine carefully the proposed changes 
when you get to the Install Proposal Summary. 
»» Media Check OpenSUSE is no different from most Linux 
distributions in that its installation media has a way of 
checking its integrity. Run the Media Check to be sure there 
has been no errors in the burning/writing process. DVDs are 
most likely to have problems, especially if you use a poor 
quality DVD media and/or decide to burn the image at too 
high write speed. 

There are two media checks you can do: 
Checking the md5sum of the downloaded ISO. Torrent 
clients do this, as will k3b when you load an ISO for burning. 
If it fails to match there is little point burning it or writing it in 
any way. 
DB Then there is the integrity check of the burned or written 
media. Even if the downloaded ISO is good, a burn/write can 
go bad. Checking both is the belt and braces approach. 
» Disk Partition labels This isn't really OpenSUSE specific. 
But it’s really handy if you give your partitions a label. 
Especially if you have a number of partitions above and 
beyond your actual installation. The installation partitioner 
can do this, as can tool’s such as Parted Magic. Use labels 
that make sense to you: eg If you have a1TB partition you 
plan to use for all your movies, use that as the label. This 
partition will show in your file manager with that same label 
rather than some arbitrary XXGB partition name. 








This completes our tutorial, which should mean that by 
now you should be able to master some of the intricacies of 
OpenSUSE and enjoy the benefits of this powerful, full bodied 
distribution with a strong community following. 


Top tips 


Post Installation 

» Install updates Run zypper patch twice to install all the 
security patches and bug fixes, then reboot. This is important 
for many reasons, most notably because some drivers you 
may want to install are built against the most recent kernel. 
Having the patches installed will ensure you are running the 
current kernel. Keeping everything updated is then: 

zypper up 

» Wireless tips Wi-Fi continues to be something of a trouble 
spot. The most useful information to help people trying to 
help you is the device information. We quoted the code for 
that earlier, but here it is again: 

sbin/Ispci -nnk | grep -iA2 net 

Make sure the package kernel-firmware is installed. 

» Fonts The fonts in OpenSUSE might need to be tweaked. 
This tends only to involve switching the font to Droid Sans 
and enable hinting with the ‘Slight’ option. There is a package 
you can install called fontconfig-infinality, which some users 
have found gives improved rendering. Alternatively, there are 
some users who have OpenSUSE BuildService repositories 
with font subpixel-hinting improvements. You can search for 
those at: http://software.opensuse.org/search. 

But don't mix infinality with other repos offering a 
modified build of subpixel-hinting. Of course too, there is the 
ability to pull in (Microsoft Fonts) with the helper package 
fetchmsttfonts. 

» Other Software Everyone has different expectations and 
requirements which makes it almost impossible to cover 
everything, but remember to use the search function in 
Software Management to check what's already available in 
your current repository configuration. For non-standard and 
Proprietary software, such as: Skype or Steam, you can check 
the Software Search we have already mentioned and also this 
search engine: http://search.opensuse.org. 

» Zypper This isn't that different to the apt and yum 
packaging tools found in Debian and Redhat-derived distros 
respectively. KDE users can read documentation in 
Konqueror by running man:zypper in the address bar. In the 
terminal, it’s just man zypper. If you want to search for a 
theme, for example, it’s a case of opening a terminal and 
searching for it by name with zypper or for theme packages 
generally with zypper se theme. 
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> There’s a 
plethora of 
options in the 
Yast Control 
Center offering 
great flexibility 
in system 
settings and 
configuration. 
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Job scheduling Harness the power 
of Cron and automate regular tasks 


Cron & at: Job 


Got Cron? Neil Bothwick shows you how to save time by scripting regular 
tasks and one-off events to happen when and how you want them to. 


emember when they told us that computers were [ateiel 
going to make life easier for us and save us time? |Add or modify a scheduled task 








; ; |. This task will be executed at the specified intervals Vv | 
Well, it must be true because Windows users have all eae : , a ? : ee | 
Command: © | aplay /usr/share/sounds/pop.wav a iL 
that spare time they can use for cleaning up after viruses and | comment, — lose | 
malware! Having a program that will back up your hard drive | 5. eu wae: as a | 
or check for a new release of your favourite podcast is great, | - Months Days of Month ee 
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but you still have to take the time to run it. If software can 


do the job for you, it should be able to do it when you want See SB x 

















ms a 15} [16] (17) (a8) [19] (20) (21) | | pm [a2] {13} [24] [25] [26 | 
Neil Bothwick = without you needing to ask it to, or even remember to. | (BURRS GRIT (22) (23) 2) (25) 25) (27) (28) a9) ERY za} (22) 2a 
spies ea . Linux has a couple of options for running tasks at set | 10 20) (ian | | lies ON | 
won't disclose the times, so we're going to look at how you can have your oe Days of Week Minutes | 
Ee ee 7 computer remember to do things for you, even when you | ams nae 2 é - a = | 
security reasons. don't. The two standard programs for these tasks are Cron | anaes om bat omic beei 
and at. Cron is for repeating tasks, while atis used to run | Sunday Clear All ee 


tasks once, at a specific time. | sees dais | 
Cron daemons > KDE’s task scheduler adds plenty of buttons to set up 
There are a number of Cron daemons available on Linux, but various schedules with your mouse. 

we're going to look at vixie-cron here because it’s the most 


popular. While the basics are the same for the various Cron crontab format first. If you run: 

daemons, some of the details are different, so if you use a crontab -| 

different Cron, take a moment to check the documentation. you will see a list of currently defined jobs. There might be 

A Cron daemon runs in the background, waking up once a none, so let’s set one up. Run: 

minute to check whether you have any scheduled jobs for it crontab -e 

to run. These jobs are defined in files called crontabs. Slightly in a terminal to start editing it. You should use crontab -e to 

confusingly, there is also a command for managing crontab edit a crontab file, rather than loading it into an editor directly. 

files that is also called crontab. Crontab runs your editor, but also checks the syntax when 
The main system crontab file is /etc/crontab. Tasks you have finished making it more difficult, but not impossible, 

defined in here are managed and run by root, but can be run to mess things up. Crontab uses the editor defined in the 

with a specific user’s privileges. Users also have their own EDITOR environment variable, so you can let it use whichever 

crontabs containing tasks to be run for and as that user, text editor you prefer. As a trivial example, add this line: 

this is where you define your own Cron jobs. The format of 0 ** ** aplay /usr/share/sounds/pop.wav 

the files is slightly different, so let's take a look at the users A user's crontab line consists of six fields. The first five 


define the schedule while the remainder of the line is the 
* command to run. This example plays a slightly annoying 

sound on the hour. Of course, this is just an example; you 

could be doing something useful like running a backup 






# sHeader: /var/evsroot/gentoo- -x86/sys- process/vixie- cron/files/crontab- 3.8.1-\ 
ra, vi. 3 2011/09/20 15-13:51 igor Exo S$ 


# Global Serie | — script or using Flexget to check for updates to your favourite 
SHELL=/bin/bash : | : odcast [See Tutorials, LXF181]. The time fields are: Minute 
PATH=/sbin: /bin: /usr/ sbin: /usr/bin e 
MAILTO=root _ _o | | Hour, Day of month, Month and Day of week. 
ot _ 2 The * wildcard means ‘match any; so this line matches at 
# check seripts in cron.hourly, cron.daily, cron.weekly and cron. monthly any hour on any day in any month as long as the minutes are 
59 * * ~ * root rm -f /var/spool/cron/lastrun/cron.hourly ‘ 
9 3 *** root rm -f /var/spool/cron/lastrun/cron.daily : zero — on the hour. The days of the week are numbered O-7 
194 ** 6 root — rm -f /var/spool/cron/lastrun/cron.weekly i starting with Sunday, so Sunday can be either O or 7. If you 
29 5 1% © root rm -f /var/spool/cron/lastrun/cron. monthly 

* 


*/10 * -*** root test -x < /ust/sbin/run-crons && “/ust/sbin/run- -crons” think of the week starting on Monday, use 1-7, otherwise use 
| O-6; it makes no difference to cron. 

We used a minutes single value here, but you can also 
use lists and ranges. A list is a series of values separated by 
: a a commas, and lists can include ranges. Do not include spaces 


arr Sree ae te ta ere ee the CNL syste, ne neeee =~ sUin'the lists or Cronwill think the rest is the next field. A more 









eee ee ee complex example would be: 
> A text editor like this is the traditional way of saline: your cron tasks, with */10 7-10,17-22 ** 1-5 aplay /usr/share/sounds/pop.wav 
crontab using whichever editor you have set as your default. Here the hour matches between 7am and 10am, and 
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scheduling 


also between 5pm and 10pm, while the day matches Monday 
to Friday. The minutes field shows another option, */10 
matches when the minutes are divisible by 10, so this will 
make an annoying sound every ten minutes during weekday 
mornings and evenings. Only a truly evil person would install 
this task on a friend’s computer while they weren't looking. 
All fields have to match for a task to run, so you would not 
normally use both the day of week and day of month unless 
you want very occasional matches, like running an extra 
backup on Friday the 13th, just to be on the safe side. 

The system crontab follows a similar format, except 
there is an extra field between the day of the month and the 
command. This specifies the user the task should run as, 
usually root for system tasks. Only the root user (or one using 
sudo) can edit this file. 


Other settings 

When a cron job runs, a number of environment variables are 
set, according to the user running it, such as $LOGNAME, 
$HOME and $SHELL. It is also possible to define variables in 
the crontab file by placing the definition at the top, either to 
override a standard variable or to add another. One of the 
most useful is: 

MAILTO=me@example.com 

This sends the output from any cron job by email. If you 
redirect standard output to /dev/null in the crontab 
definition, the only output should be error messages, which 
will be mailed to you when something goes wrong. No email is 
sent when there is no output. 

Running a command from Cronis not the same as 
running it in a terminal, your profile is not loaded and the 
path may be quite limited. It’s good practice to always use 
full paths for commands in the crontab. If you're running a 
script, you may need to add something like: 

source /etc/profile 
or: 

source $HOME/.bash_profile 
if you would like to have the command run in a similar 
environment to that of your shell. 

There are some shortcuts for common schedules that you 
can use instead of the normal five fields, such as @hourly, 
@daily, @weekly and so on. The man page describes them 
all. You may also have directories /etc/cron.hourly, /etc/ 
cron.daily, /etc/cron.weekly and /etc/cron.monthly on 
your system. Drop a script in one of these directories to have 
it run at the appropriate time. These will always be run as root 
and not necessarily on the hour, the scheduling of these is 
usually spread out to avoid a high load at the top of each hour. 


Where it’s at 


If you want to run a command once, at a specific time, atis 
your friend. Unlike Cron, this is not always installed by default, 
but will be in your distro’s package manager. At takes a time 
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specification as its argument and reads the job to run from 
standard input, for example: 

echo “somecommand --with-opts” | at 13:30 
will run the specified command at 1:30pm. The time 
specification is incredibly flexible and you can also perform 
arithmetic on it. Although: 

echo somecommand | at now 
may not seem that useful (you could just run the command 
yourself), what about using: 

echo somecommand | at now + 1 hour 
or even: 

echo somecommand | at 5pm + 1 day 
to run it at 59m tomorrow. 

You can see the jobs you have queued, or that everyone 
has queued if you are root, with atq. Along with the time, it 
gives each job a number, which you can use to delete the 
queued job with atrm or list its contents with: 

at -c jobnumber 

While cron tasks are run with a minimal profile by default, 
running at -e will show you that at sets everything up to 
mirror the current environment before running the job. 

Now with Cron and at taking care of everything behind the 
scenes, you can leave the computer to get on with the boring 
things while you enjoy yourself. 


¥ @ Advanced @ wr 


Task Description Date and Time Command preview 


gp New ¥ 


Edit weekday 
Description: Untitled 
@ Every weekday 


_-) Ina step width Command: Is 





Default behaviour 


ina range 


Time & Date 


Basic 


Ona weekday 


@ Advanced 


Minute: */10 
Hour: 7-10,17-22 
Day: * 
Month: * 


Weekday: * 


Preview 


At minute: */10, hour: 7-10,17-22, 
every day of month, every month 


Addastemplate Cancel Add 


> Gnome’s task scheduler has fewer buttons than KCron, as you would expect, 
but still provides a handy alternative to a text editor. However, a text editor is 
still the most flexible way of creating Cron tasks. 
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Blogging platform Install Ghost on a 
web server and add a custom theme 


Ghost: Setup a 


Are you looking for a simple and easy to use blogging platform? Then give 
Ghost a try. John Lane shows us why it may be just what youre looking for. 





John Lane 

fell into Linux way 
back in 1994 and 
has been hacking 
his way out ever 
since. He has a 
Git server ina 
secret location. 





f you want a blog these days, you'll probably be drawn to 
[ieee But what originated as a simple blogging 

platform has evolved into a fully-fledged content 
management system, or CMS, that’s capable of being used to 
build complex websites. Wordpress has grown up and it no 
longer has a specific purpose, which is great if you're looking 
for a good CMS. But if all that you want to do is to quickly and 
effectively publish content on the web, using a CMS can over- 
engineering what ought to be a simple task. But there is an 
open source alternative called Ghost. 





Ghost 


Just a blogging platform. 


Welcome to Ghost 


> When you start You're live! Nice. We've put together a little post to introduce you to the Ghost 
editor and get you started. You can manage your content by signing in to the 
Ghost for the admin area at <your blog URL>/ghost/. When you arrive, you can select this post 
i I 5 fram a list 
first time you get from a list... 
welcome post 


but not a lot else. he Ee Ae a eek ea [1/1] Top® : 





74 | LXF183 May 2014 www.linuxformat.com 


Ghost, in its own words, is just a blogging platform. It goes 
back to basics to offer a simple and clean platform for 
publishing your writing to the web. You can download the MIT- 
licensed source code and run your own server or you can sign 
up for a hosted version for a small monthly fee. In this tutorial 
we will set up our own Ghost server and create some content 
to demonstrate its features. Follow us and you'll be blogging 
inno time. 

Ghost is relatively new and isn't yet in most package 
repositories (Arch Linux users can build it from the AUR), so 
head over to the Ghost website at http://ghost.org to 
download the source. You'll need to register and then log in 
before you can see the download link, or you can get it 
directly via the terminal: 

# curl -L https://ghost.org/zip/ghost-latest.zip -o ghost.zip 


Getting the prereqs 
Check that you have the necessary prerequisites before 
continuing with the set up. Ghost is built on node.js and 
requires the latest stable version (0.10). Node.js is a server- 
Side javascript platform based on Google's V8 Javascript 
engine. Install it from your package repository, and check that 
it installed successfully: 
# apt-get install nodejs 
# node -v 
v0.10.25 
# npm -v 
3.24 

Choose a suitable location for your Ghost server, such as 
/srv/ghost. Unzip the package and run the installer (nom is 
the Node Package Manager). 
# unzip ghost.zip -d /srv/ghost 
# cd /srv/ghost 
# npm install --production 

The --production argument that’s passed to the installer 
tells it to only install what's required to run Ghost; it excludes 
additional dependencies that are only necessary for those 
developing the Ghost server. 

Ghost's configuration is in a file called config.js that’s 
copied from config.example.js the first time Ghost starts. 
It contains the address where Ghost listens for connections 
and this defaults to the localhost address, 127.0.0.1. You'll 
need to change this if you want to access it from another 
machine on your network (if, say, you installed Ghost onto a 
headless server). You can edit the file by hand or do 
something like this: 
# sed -e ‘s/127.0.0.1/0.0.0.0/g’ config.example.js > config.js 

Although optional, it’s also a good idea to configure Ghost 
So that it can send email. The current version only uses email 
for password reminders but that’s a good enough reason to 
set it up. Add the following in to config.js, just after the 
example mail configuration: 














Q 


Ghost Tutorial 


ustom 5 





Send email from your server 


We have configured Ghost to use Sendmail for 
email. If the machine running Ghost doesn't have 
Sendmail, you can use SSMTP., a send-only 
sendmail emulator with just enough functionality 
to send mails. Install and configure it like this: 

# apt-get install ssmtp — 


EOF 


mail: { 

transport: ‘sendmail’, 

options: {} 
}, 

Note the trailing comma. The empty options block 
prevents Ghost from displaying a meaningless warning 
message. That definition is sufficient to send mail as long as 
the server has a working sendmail or equivalent. For other 
options refer to http://docs.ghost.org/mail. 

One final thing to configure is your blog’s URL — it’s 
referenced in password reset emails, so you'll want to set it to 
something resolvable, at least within your internal network 
whilst testing. Our test server's name is Ixfghost and 
http://Ixfghost:2368 was sufficient while testing internally. 
Edit the URL setting in config.js: 

url: ‘http://xfghost:2368’, 

That's all there is to it; you can now start your Ghost 
server. It displays the IP address and port where it’s listening 
— you can browse to this location in your web browser. 

# npm start 

Ghost is running in development... 
Listening on 0.0.0.0:2368 

Url configured as: http://xfghost:2368 


Get posting 

To start writing your blog, you will need to point your web 
browser to /ghost. When you do this for the first time, you'll 
be redirected to a sign-up page so that you can create an 
admin user account. Complete this and you'll be taken to the 
admin screen. Ghost will send you a welcome email message 
if you configured email. 

The interface is quite simple and there are three main tabs 
supplied. Content lists all posts as we have seen, New Post 
creates anew post and Settings is used to manage how your 
blog looks. 

Selecting New Post opens a new editing window with two 
panes side by side. Ghost uses Markdown formatting syntax 
— you type this into the Markdown pane on the left and see 
formatted output in the preview pane on the right. There's a 
Small question mark icon on the Markdown pane that 
explains the basics of the syntax but you can learn more at 


# cat > /etc/ssmtp/ssmtp.conf << EOF 
Mailhub=smtp.example.com © 
RewriteDomain=example.com 


You will need to specify your own SMTP server 
for the Mailhub domain and your own domain in 





RewriteDomain, and you can test that it works 
correctly with the following: 

# echo “testing ssmtp” | sendmail you@example. 
con 
and then just look out for an incoming test 
message in your inbox. 


http://bit.ly/markdown. Ghost provides keyboard 
Shortcuts for the main ones. 

Your work is not saved automatically, so press the blue 
Save Draft button periodically to do this. When you are ready 
to publish, click the little arrow icon next to Save Draft, select 
“Publish Now” in the menu that appears and then click the 
red Publish Now button. Unpublished posts are only 
accessible through the admin pages, published posts are 
publicly visible on your site. If you change your mind, a similar 
action allows you to unpublish a post. 

The label that’s on the blue button that saves your work 
changes when a post is published. This changes from Save 
Draft to Update Post but still does the same thing, which is 
Saving your work. You can also tag posts. Click in the bar at 





To see if your repo 


the bottom and begin typing a tag name. Existing tags will be doesn't have a 
suggested as you type — click one of these to select it. suitable version 
Otherwise, everything that you type will become a new tag, of Node.js check: 
including whitespace. Press Enter on your keyboard to oa 
complete the tag. At the moment, you can create tags but 
nothing is done with them. Sorting and filtering posts with 
tags is a future roadmap item. 
At the end of the tag bar is a small gear-shaped icon. 
This gives access to some post settings that you can alter, 
including the post's URL and it’s publication date. This is also 
Welcome to Ghost | 
—— Welcome to Ghost 
Getting Started 
> The admin 


screen lists your 
posts on the left 
and content on 
the right 


~ 
[1/1] Top® ~ 


http: //Lxfgh 2368/ghost/ [-] 


If you missed last issue Call 0844 848 2852 or +44 1004 251045 
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where you go to if you want to delete a post. The final setting 
here allows you to make the post into a static page. Static 
pages aren't listed with posts, they must be directly accessed 
by a URLor via coding in your theme. You might use them to 
provide About or Contact pages on your site. 

Personalising your blog by customising how it looks is as 
important as the content you decide to post. There are two 
places where these customisations take place: the Settings 


tab and the theme. 


On the Settings tab, you can give your blog a title and 
description. You can upload a logo that will be displayed on 
each post and a cover image that will appear on the front 
page. It’s here also where you select the theme you want. 


Customising Casper 
Ghost’s default theme is called Casper and the theme 
documentation suggests one way to start a new theme is to 
copy Casper and customise it. So that’s what we'll do here 
but, if you prefer, you can get ready-made themes at 
http://marketplace.ghost.org. Some are free whereas 
others require a payment and you can also upload your own. 
Ghost's themes are stored in content/themes and 
creating a new one (albeit the same as Casper) is a simple 


matter of copying it. 


cd /srv/ghost 


cp -a content/themes/{casper,linuxformat} 


®@* | = Ghost Admin ip | 





You can embed HTML 


One of the great feature 


that you can embed HTML directly 
this 


text. Look at this 


liv>< 


<div><center> 
<p style="color: yellow; background: red; 
font-weight: bold”>This is an 


paragraph embedded in my pos 


image in the middle of it.<br> 


<img style="width: 1@@px’ 


src=http://upload.wikimedia.org/wikipedia 
/commons/a/a8/NASA-Apollo8-Dec24- 


S 


HTML 


o, if <a href=https://daringfireball.net 
/projects/markdown>Markdown</a>Can't do 


what you want an <span 


s of *Markdown* is 


in your 





» you cz 
style="color: green">do it yourself! 


</span></p> 
</div: 


> If Markdown 
can’t offer all you 
need, you can 
use HTML! 


Host Ghost in the cloud iced 


Ghost has recently been made available 
as a hosted service and can sign up at 
http://ghost.org from $5 per month. 
The hosted version works exactly the 
same as the version that we've 
downloaded and installed but you can 
jump right in and start blogging if you 
prefer a hosted solution. 

You can upload content and themes to 
a hosted blog and you can migrate this 
from a self-hosted blog. First, you have to 
export your data and theme. There's an 
export facility for this on the curiously 
named ugly debug tools that you will find 
at /ghost/debug underneath your blog's 


http: //Lxfghost: 2368/ghost/editor/3/ [- 





[1/1]Top@ * 


root but, for your theme, you'll need to 
manually create a ZIP file on the server. 
# cd /srv/ghost/content/themes 
# zip -r linuxformat.zip linuxformat 
You import your data using the similar 
ugly debug tools that you will find on your 
hosted blog. You may want to delete 
existing content first. You need to use the 
Edit function at http://ghost.org/blogs 
to upload your theme ZIP. 
Unfortunately, there’s no mechanism to 
upload images to the hosted service, 
so you'll have to visit any posts that have 
images and reattach them. Hopefully a 
later release will address this shortcoming. 





This will create a new theme called linuxformat. You have 
to restart Ghost to make the new theme available, after that 
you can select it on the Settings tab. Right now, it’s identical 
to Casper. Let's do something about that. 

The files you will most likely want to modify are the style 
sheet, found within the theme directory at assets/css/ 
screen.css and layouts in the *.hbs files, which use the 
Handlebars templating language. You can read more Ghost 
themes and how to make the most of Handlebars at 
http://docs.ghost.org/themes. As an example, we 
modified the CSS to give the title text a background and 
rounded corners. 

We said that Ghost takes blogging back to the basics. If 
you want to accept comments on your posts you'll 
experience initial disappointment, because you can't. This is, 
however, by design and the reason that the Ghost developers 
give is that there are many third-party commenting services 
available and you can embed these into your theme to enable 
commenting on your blog posts. 


Adding a comment system 
Your chosen commenting service should provide you with an 
HTML snippet to embed in your page content. We'll 
demonstrate with Google+ comments; the code to add is 
shown below: 
<script src="https://apis.google.com/js/plusone.js”></script> 
<g:comments 

href=”"{{@blog.url}}{{url}}” 

width=”700” 

first_party_property=” BLOGGER” 

view_type=”FILTERED_POSTMOD”> 
</g:comments> 

You need to add this into the HTML for a post and that is in 
part of your template in a file called post.hbs. So, for our 
linuxformat template, we need to edit content/themes/ 
linuxformat/post.hbs. Add it into a new <section> before 
the beginning of the footer. You can adjust the width 
parameter to your needs. The href needs to specify the 
page’s URL so we used Handlebars expressions to have 
Ghost generate that for us. Note that the URL must be 
accessible to the Google service (ie accessible on the 
internet) and this means that comments won't work if your 
website is an internal one. 
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linuxformat.ghost.io 


> There are 
alternative Ghost 
hosting services. 
Try http:/7 
digitalocean. 
com and http:// 
ghostify.io. 





alata V, r Ri 
Delete Your Blog 


Naming 
gone. There is no recovery process. We warned y 


Never miss another issue Subscribe to the #1 source for Linux on page 30. 
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Exploring Ghost’s elegant blog posting system 








nhave comments! | # 


Registration ; <a Manca 
The first time you use Ghost, Saas 


you'll need to register an 
Hello, World! 





account by signing up at 
htp://ghost.org. Enter your 
name, email address and choose 
a password. Check your email 
for a welcome message. 


You type on the left and use *Markdown* to You type on the left and use Ma 
es format your text. format your text 
Tab options 
Cont ie t the left 1@ PRINT “Hello, World!” 
nth CHE HSES Posts Of the te 2@ GOTO 10 10 PRINT "Hello, World!” 
with the selected post 29 coro 10 


previewed on the right. You ! You can include pictures too 
need to click the pencil icon on | g 


the far right, next to the 'C] (http: //upload.wikimedia.org/wikipedia 
Settings cog icon to edit it; New /commons/a/af/Tux. png) 
Post starts a new one. 





iJ 

Markdown 

Type your post on the left and 
use Markdown to format it. The 
question mark in top right of 
the pane opens a pop-up help 
page explaining the syntax. Use 


the blue button (bottom right) lef 





oe TO ai) gee Clg te mem Clty /-st r= a lS  . 
http: //Lxfghost: 2368/ghost/editor/2/# [-] SUsAE 

® @ 

Post settings Tags and publishing 

The gear icon allows you to change your post's You can create tags on the black bar at the Publish now option. The blue button changes 

URL, publication date or make it a static page. bottom left. When you're ready to publish to a red Publish Now button. Press it to 


This is also where you can delete your post. your post, use the blue up-arrow to select the confirm that you want to publish your post. 


Of course, you could use other commenting services that 
are available, such as those provided by Echo, Disqus, Livefyre 
or IntenseDebate or even Facebook, if that’s your preference. 

The Ghost blogging platform performs automatic update 
checking so that you can be alerted when there's a new 
version available. In doing so, anonymous usage data is 
collected. If this makes you uncomfortable, you can opt out 
by setting updateCheck: false in your config.js file. However, 
you can always head to http://bit.ly/ghostupdatecheck 
and satisfy yourself about what is involved by checking the 
source code. Further details are available at http://docs. 
ghost.org/usage/configuration. 

Ghost allows you to configure multiple environments in 


LINUX 


sale 


A LinuxFormat Blog 


Linux, and other things 
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the config.js file. So far, we have been using the default 
development environment but there's also a production 
environment that you can configure and you should do this 
when you put your blog live. 


Welcome to Ghost 


You're live! Nice. We've put together a little post to introduce you to the Ghost 
editor and get you started. You can manage your content by signing in to the 
admin area at <your blog URL>/ghost/. When you arrive, you can select this post 
from a list.. 


The development and production environments differ in 
how much logging is performed and how they pass content 
to the browser (the asset pipeline). When you're ready to 
release your blog to the public, you should make sure you 


standard HTTP port, which is 80. If your server hosts only 
Ghost then this is a simple matter of configuring it that way in Shape with its 


configure and use the production environment. For our blog, config.js. If, however, you already run a web server then you own theme. 
we configured this in config.js and started the server with might want to publish your blog on a subdomain. Web servers 
npm start --production such as Apache and Nginx can be configured with a virtual 
The other thing that you will probably want to do when host to handle your subdomain and proxy requests to your 
you do decide to go live is to publish your blog on the Ghost server. E¥ 
www.tuxradar.com 


) Our blog takes 
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Embedded electronics Learn how to 
construct circuits with a breadboard 


Shrimping.It: 


Circuitry fun 





Richard Smedley demonstrates how Shrimping.it can put the education 
back into microcontroller fun and how it's inspiring the next gen of makers. 





Richard 
Smedley 

is used to 
applying his 
ad-hoccery skills 
as a sysadmin for 
many small 
charities and 
growing startups. 


orecambe has long been famous for its fishing 
M heritage and in particular potted shrimps, but the 

town looks like it could become renowned for an 
entirely different kind of crustacean. This particular Shrimp is 
Slightly less edible and of the electronic variety as it’s a 
breadboard (which still doesn't make it anymore edible). 

If you look closely at the Arduino Uno protoyping board 
you'll discover that it’s actually an Atmel Atmega 
microcontroller with bootloader, a power regulator, VART and 
that’s about it. This is where http://shrimping.it and the 
Shrimp kit swims helpfully offering a low cost, no-nonsense, 
look-you-can-see-how-it-connects-and-works, Arduino- 
compatible board. 

The Shrimp also enables you to add in a CP2102 USB to 
UART bridge for connecting to your computer to start 
programming it, and manages to do this without raising the 
cost through the roof. Better yet, you only need one or two 
CP2102s to program a whole workshop full of Shrimps, 
so everybody can walk away with a working Shrimp project 
for less than the cost of a coffee. 








) With the Shrimp, you have to start by handling and assembling components 
yourself, which means learning circuitry is pretty much guaranteed. 
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This isn't all about the cost, however — certainly the low 
price makes it a great enabler for educational projects, but it’s 
the natural learning that kids — or adults — will experience in 
making their project that’s the real product of the whole 
process. We admire the Arduino Uno but it is a little obscure 
in its workings — it’s quite hard to even see the pin 
connections across the board. Add in pre-made Arduino 
Shields, and while it’s great for those familiar with how 
microcontrollers work and what to do with them, there's too 
much that’s hidden for a beginner to easily pick up what's 
going on. The Shrimp is different — it arrives as a handful of 
components for you to assemble. 


Start shrimping 

Just as medieval recipes started with ‘first catch your swan; 
SO you need to ‘first assemble your Shrimp: The component 
cost of the most basic Shrimp, especially if you can buy the 
components in bulk, is close to trivial as you can see from the 
list below (see http://shrimping.it/blog/bill-of-materials): 


er IMA sl Be ta ate ey es aLA/ 
ED ZXAZOF CAPA CION sss. cccecinsccosnoscsouddinverow aanasercazsonde £0.02 
BXTOOAP CAA EOE jk eects Bed ee als £0.04 
BF TXLOUP CapAaciBOr o.oo ccovst ence vessestoeessvisaren £0.02 
BS 1x10K OHM resistor cece £0.01 
[3 16MHz quartz crystal ooo. ceeen £0.07 
SENET E TAC ESSE EID ices enseoscdeccacenrsurenaossoeacen elec £0.04 
E) Various coloured wire or jumpers 00... £0.05 
f) One LED and matching resistor for testing ............ £0.02 
I) 9-pin male header strip ooo... £0.02 
TAL COSEHER-VAAT GIG PEP ec Siesta encase! £1.46 


But for a one-off purchase, it’s cheaper to get a kit from 
http://shrimping.it/blog/kits — where a barebones kit 
costs £4, and the breadboard is available separately, or 
included in the expansion packs. 

You may find that your first challenge will be getting the 
microcontroller into the breadboard itself — we corrected our 
lightly splayed pins by gently squeezing between table and the 
breadboard back — after which plugging in the components is 
a fairly straightforward process. If you head to the official 
Shrimping blog (http://shrimping.it/blog/blink) this has 
full step-by-step instructions on assembly. 

You can see from the picture (left) how it’s meant to go, 
and at the other end you'll need to plug the wires into your 
CP2102 USB to UART bridge in the following combinations: 








Shrimp origin story | 





Cefn Hoile was running Arduino Fignitions (http://bit.ly/1fTyx86), and being used locally to make Morecambe 
workshops with children at one of the Hama Bead space invaders. From this into a’'Maker Town’ with the backing of 
Raspberry Jam events but was frustration came Shrimp, a low-cost DIY the council, which has funded boards for 
dissatisfied with the lack of a product to Arduino-compatible board with “all the any child wanting to try one. This Hoile 
take home for the kids, and-thankstoa — good stuff that Fignition and Hama Beads _ says is about “creativity, and identity with 
classroom full of locked-down Windows have,” says Hoile. creative expression.’ Now kids at Hoile’s 
PCs — lack of learning, as everyone had to Shrimp is designed to encourage workshops follow engaging tasks with 
shoulder surf much of the coding on one prototyping skills (the first stage of cool toys to taking away — like a 

laptop. In the other rooms kids were design, when you construct your circuit persistent-of-vision toy they've 

leaving with freshly soldered together with a breadboard). Currently the boardis programmed and built themselves. 


Red into 5V, Orange into RXD, Yellow goes into TXD, Green to Shrimping.it website. The Things to do with your Shrimp 


GND and, finally, Brown into DTR. below, includes a clone of the 1970s favourite, Simon Says. 

Now you are all ready to install the Arduino IDE, and run To keep the kids interested, it’s great to be able to control a 
your first program — or ‘sketch’ as it’s called in Arduino-speak. = Shrimp’s inputs and outputs directly from the console, 
There’s so much you can do with your lovely new Shrimp. without writing a program. The PyFirmata library lets you do 
Obviously, Arduino Uno compatibility gives you access to this, and also can make a bridge to Scratch, the language 
thousands of sketches and circuits, and there are some great youngsters are learning at Code Clubs around the country. 
circuits and kits that are beginning to appear on the official Happy Shrimping! 


Things to do with your Shrimp 


Attach USB or 
Battery, never 
both 


void setup() { 
// initialize the digita 
aia 


con 


void loop() { 
digitalWrite(13, HIGH); 


// Pin 13 has an LED c 1 on most Arduino boards fn ee . 4 

pinMode(13, OUTPUT); oat e¢ er we eg 
; ec eS € © 4 

delay (1006) ; 

digitalWrite(13, LOW); 


oe ss seat C_ tttoxshrimping,t/shrimp/project/memory/ ) 
Mi : 
wn —— ; re  Sscmensennesinevetnrennerernanmensnnl 


Your first Shrimp B Adding Arduino Simon says... 





The Shrimp crew use the Blink build at the Fully compatible with the Arduino Uno, you'll In the pre-ZX81 1970s we may not have had 
start of workshops ‘to prove that everything just need to install the IDE from Arduino.cc. home computers, but we did have Simon. 
works before adding more challenging From the menu load: File > Open -> Examples Think Boppit, without the voice and motion. 
modules or behaviours.’ If you buy akitit'lladd -> Basics -> Blink and click the horizontal You press the buttons in the order that they 
a few more capacitors and resistors to what arrow on the toolbar to send the code to your _were flashed. Each round adds an extra step 
we show here (http://bit.ly/1cPehqz). Shrimp. A flashing LED indicates success. until you fail (http://bit.ly/lejWi8J). 


eee ee eee 





2 Optical fun © Free up your breadboard [Shrimp together 


Reminiscent of writing letters in the air with a Soldering the basic Shrimp to a strip board We hope you'll get the Shrimping bug, but the 


sparkler, the Persistence of Vision kit will free up your breadboards for more best source of inspiration is working with 
replicates this trick with a circuit. A columnof circuits. This uses a 28-pin DIP IC socket other people. The @Shrimpinglt Twitter feed 
LEDs is flashed in a timed sequence to mimic adaptor, which means that you can stillshare © announces workshops, plus you can take 
several consecutive columns and build the same Atmel microcontroller between your board to Arduino events at your local 
characters or shapes. (http://bit.ly/1fC5x31). your circuits (http://bit.ly/1bLRT2X). MakerSpace or HackSpace. 


www.tuxradar.com May 2014 LXF183 | 79 














Web server Set up a home hosting 
solution for learning LAMP and more 


LAMP: Harden 


Want to learn how to administer a web server? Kent Elchuk shows you how 
to set up a fast-loading, resiliant home web server for testing and training. 


to beginner or skilled web developers. For the 

beginner, it enables you to practice without security 
risks or having to pay any fees, and test your scripts and web 
pages prior to going live. In addition to testing web pages, a 
home setup will help you to get to know and experiment with 
the LAMP stack, or host a low-traffic website. The LAMP 
stack consists of Linux, Apache, MySQL and PHP. However, 
there are options to replace the Apache server with a different 
Kent Elchuk one like Lighttpd or Nginx. 


is a full-time lead For the experienced user, it can be a playground to 
web developer for 


BR uilding a home web server can be very advantageous 





two colleges in experiment with new packages, server setups and to 
Vancouver. When integrate with other hosted server setups. An example of 
te ae integration is running video from one or more webcams and 
4am, he likes to having them viewable from a hosted website located on 
program scrapers another machine. A Linux package like Motion would be 
ee sufficient to make this happen. Another example is to test a 


package like Varnish (an HTTP accelerator) before doing the 
same thing on your dedicated server. This article will detail 
various methods to host a website at home on devices such 
as the Raspberry Pi, a cheap PC and even USB sticks. 


Choosing your setup 
A USB stick is a cheap option to install a persistent Ubuntu/ 
Debian installation. Although many brands work, Kingston 
Data Travellers are always compatible with Linux, and they are 
easy to mount and use for backups. To get up and running, 
there are several tools that are freely available, such as 
UNetbootin, to install an ISO image to a USB stick. The 
installation should have persistence since you will want to 
keep your files and any new packages when you reboot. If you 
use the USB stick, you can access the shell with SSH or use a 
laptop (or desktop monitor) to run the machine. 

Alternatively, you could use a bargain bucket laptop or PC, 
but as we know this can be a bit hit and miss, particularly as 


‘dict, file. ftp, ftps. gopher, http. https. imap, imaps, idap. pop3, pop 
rtsp. smtp, smtps, teinet, tftp 





> Writing the statement echo phpinfo() in a PHP file can provide you with a lot 
of useful information about your current PHP configuration. 
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many people get rid of them when the hard drive begins to fail 
but as we mention in the boxout (See Hosting Setup Options, 
p&3) that may not matter. 

Finally, for less than $100 the Raspberry Pi and a few 
accessories can be a reliable unit since it has no moving parts 
and can fit almost anywhere. Raspberry Pis consume very 
little power and make an excellent device for experimenting 
with since the hard drive can be an SD card or USB stick. 

If you decide to use a Raspberry Pi, there are various Linux 
distros you could install. However, the Raspbian distro has 
many forums and good online help and it’s recommended for 
beginners [See Master the Amazing Raspberry Pi, p34, 
LXF181]. For newbies, there’s also the NOOBS installer, which 
you just need to add to a FAT-formatted SD card (that’s over 
4GB) and run to choose from a number of distros [See 
NOOBS review, p21, LXF181]. If you do plan to use a 
Raspberry Pi, an easy install setup is an HDMI cable 
connected from your Pi to a hi-def TV, along with a 
compatible keyboard, mouse and Ethernet cable. After you 
have the NOOBS folder on a USB card, you simply boot the Pi 
and follow the instructions on the telly. 

The Apache tutorial (See p72, LXF180), which covers a 
LAMP home server setup will help you get the server up and 
running. If you don’t have access to that issue, a basic LAMP 
server — Linux, Apache, MySQL and PHP -— can be installed 
with the commands below: 

sudo apt-get update 

sudo apt-get install apache2 

sudo apt-get install mysql-server mysql-client 

apt-get install php5 libapache2-mod-php5 

sudo apt-get install curl libcurl3 libcurl3-dev php5-curl 
sudo /etc/init.d/apachez2 restart 

After you have successfully installed the packages and 
everything seems to be working properly, you can move on 
and test a few new setups, such as Varnish, and add 
additional port forwarding on your router to manage the 


-website from anywhere with SSH. 


If you are building the website at home you can access it 
through the IP, network IP, or domain name using SSH. 
However, if you plan to access your Linux shell through SSH 
from a foreign computer, you will need to enable port 
forwarding in the router to accept such connections. For 
simplicity, port 22 is the default SSH port and you can add 
that to the router's port forwarding, along with the IP of the 
Linux machine that will host the website. 

We'll continue with port 22, but you can change the port 
number in the file /etc/ssh/sshd_config. Since port 22 is 
the default, it’s often targeted for attacks with the root 
username. If you change the port and PermitRootLogin yes to 
PermitRootLogin no and login with a super user, you'll find the 
log files much less cluttered with failed attempts. 

If you don’t allow SSH port forwarding, you can still control 
the machine through SSH on your own home network since 











+ Tutorial 


your web server 


Once you believe that you've configured your 
home server to suit your needs, you can easily 
clone your entire disk in order to have an instant 
backup in case of emergency. 

One very simple and fast method for backing 
up is to use the powerful dd command, which is 
especially useful with the Raspberry Pi. If you 
plug in a formatted FAT32 USB stick into one of 
the USB ports on your Raspberry Pi, it should 
mount automatically. At this point, you can use 
the unmount command, and format it with the 
ext4 extension: 

mkfs.ext4 /dev/sdal 


both computers are using the same router. If you make that 
foreign connection and use port forwarding, you can access it 
via IP or the website domain name. 

When you build the website, you'll need to place all of your 
files within the /var/www folder. If you plan to host more than 
one website, you can do that too with some minor 
adjustments to the apache2.conf file and custom entries. 
The following line needs to be added to apache2.conf. 

Include conf.d/*.conf 

This line above enables you to make a .conf file for your 
domain name and you need to add your domain name in 
front of the .conf extension: eg, the file for the website 
example.com would be example.com.conf. The files for the 
website example.com will be located in the /var/www/ 
example.com folder, so vi /etc/apache2/conf.d/example. 
com.conf 

<VirtualHost *:80> 
ServerName www.example.com 
ServerAlias example.com*.example.com 
DocumentRoot /var/www/example.com 
<Directory “/var/www/example.com”> 
Order allow,deny 
Allow from all 
</Directory> 
</VirtualHost> 

Now that you have the basics to set up the website, you'll 
want a solid plan so that it’s built to run effectively. Although 
server type (Apache, Lighttpd, Nginx, etc) plays a part in 
handling the requests, the actual file system and 
programming of the website is something to consider 
carefully. If you plan to use Wordpress, Joomla, Drupal, 
Magento or one of many other popular PHP scripts, you may 
find that loading is slow and very undesirable. If you want 
some style and good performance, a nice CSS template with 
small file-sized images can produce desirable results. If you 
want to add on 15 Javascripts and heavy slide shows you can 


After the previous procedure, you can mount 
the USB stick to the media folder and a 
subfolder. You will need to make a subfolder in 
the media folder, which matches the following 
command. In this case the subfolder is called 
myusbdrive. (Note: you can use the df -h 
command If you ever need to know where your 
USB stick is mounted): 

mount /dev/sdal /media/myusbdrive 

The next command below will clone the hard 
disk to the USB using the SD card for the 
Raspberry Pi: 

dd if=/dev/root/ of=/dev/sdal/ bs-4M 


and is needed to boot the Pi. 


Finally, you need to set the Raspberry Pi to 
use the USB stick as the main hard drive. To do 
this, you open the file 7boot/cmdline.txt and 
change root=/dev/root to root=/dev/sdal. 

Do note that the SD card still contains Grub 


But, your website 


and packages will be on the USB stick. 

A procedure almost identical to this example 
could have been done to clone a Linux 
installation from a physical computer hard drive 
to a USB stick. To clone an entire USB drive (with 


or without persistence) can be easily 


expect slow loading from your viewers. If you plan to use 
PHP/MySQL, you can create lean coded, custom pages that 
Still load very quickly. Also, keep in mind that your web pages 
will load much faster when your website is on your own 
network. Away from home, retrieval will be a lot slower, unless 
you make very quick loading pages. 

Now that we've covered the basic server setup and some 
website construction concepts, there are still a few more 
simple procedures you can follow to make a faster viewing 
experience. Two simple things you can do are: First, add an 
Apache module, which enables you to setup image and file 
caching on the web surfer’s browser. Second, you could install 
and enable mod_expires or mod_headers and set up custom 
caching with a .htaccess file located in the /var/www 
directory (or your custom website folder). 

For those who plan to create dynamic websites built with 
PHP and MySQL, you can install and configure Varnish. 
Varnish is popular on many hosted websites since it stores 
dynamic content in a cache in the memory and keeps loading 
cached dynamic web pages until the page content changes. 


Setting up Varnish 

To you install, setup and run Varnish, you'll need to change 
the port on Apache to something other than 80 (like 8080 or 
81) since Varnish will use port 80. Note: Varnish will easily 
install on the likes of Ubuntu, but you will have to install it 
from source on the Raspberry Pi. 

The steps to get Varnish up and running on a Raspberry Pi 
are to download Varnish, extract the TAR file, install 
dependencies, install from source code and edit a couple of 
files. As a word of caution, you may want to setup Varnish 
after your home web server is working perfectly without it. 
This way, you only have to change the port number in the 
apachez2.conf file if Varnish fails to work properly. 

First, you'll need to become a sudoer to execute root 
commands using sudo -s and navigate to the /var/tmp 


accomplished with Clonezilla. 





static IP for your 
hosting and reserve 
a static IP on your 
router you will save 
yourself many 
headaches. You 

can change DHCP 
to static IP in your 
/etc/network/ 
interfaces file. 


If you missed last issue Call 0844 848 2852 or +44 1604 251045 
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» directory to receive the download with cd /var/tmp. You can 


download the latest version from the official repo: 
http:/ /repo.varnish-cache.org/source, using: 
wget http://repo.varnish-cache.org/source/varnish-x.x.x.tar.gz 
Extract the file with tar xzf varnish-x.x.x.tar.gz (replacing the 
x.x.x with the correct version) and change into the Varnish 
directory using ed varnish-x.x.x. Next, we need to install all of 
its dependencies: 
apt-get install autotools-dev autoconf libpcre3-dev libedit-dev 
automake libtool groff-base python-docutils pkg-config 
Then run the autogen.sh file and continue compiling and 
installing from source using sh autogen.sh and configure: 
sh configure --enable-diagnostics -enable-debugging- 
symbols 
Finally for the install, run make and make install in the 
terminal. Note: If something goes wrong and you need to take 
a second crack, run the commands make uninstall and 
make clean. 

Next, you'll need to setup the necessary links with 
ldconfig -n /usr/local/lib/. Now open the configuration file 
called default.vcl using vi /usr/local/etc/varnish/default. 
vel and uncomment the following lines and set the port to 
8080. Apache will use port 8080 and Varnish will use port 80: 


backend default { 
host = “127.0.0.1”; 
.port = “8080”; 

} 


Our next step is to change the web server port. For 
Apache, you edit the file /etc/apache2/apache2.conf. Now, 
change it to 8080 in vi /etc/lighttpd/lighttpd.conf. 

You can create a new file and make a small script to start the 
Varnish service or you can copy and paste the following 
command to start Varnish. 
/usr/local/sbin/vamnishd -f /usr/local/etc/varnish/default.vcl -a 
:80 -P /var/run/varnish.pid -s malloc,30m 
Note that the -f option is the path to the config file: /usr/ 
local/etc/varnish/default.vcl. 
The -a option represents the port Varnish uses which is 80 
and -s indicates how much cache is in the memory, which is 
30MB. You can find more about Varnish settings here: 
http://bit.ly/Varnishsettings. 
You can test if Varnish runs with /usr/bin/pgrep -If varnish 
Additionally, you can check headers for Varnish. The simple 
PHP script shown called headers.php below checks if Varnish 
is working properly by creating an array of headers. Open it 
with vi headers.php: 

<?php 

$my_url = ‘http:/Aocalhost’; 

//$my_url = ‘http://example.com’; 

//$my_url = ‘http://<ipaddress>’; 
print_r(get_headers($my_url, 1)); 

?> 
The line below can be used to display the headers using the 
command line: 

php ./headers.php 

If all is working fine, you should get something similar to 
the output below. As you can see, the server in this case was 
Lighttpd and the request was sent via Varnish. 

Array 

( 
[0] => HTTP/1.1 200 OK 
[Vary] => Accept-Encoding 


www.linuxformat.com 


[Last-Modified] => Tue, 18 Feb 2014 05:46:44 GMT 

[ETag] => “3026883401” 

[Content-Type] => text/html 

[Server] => lighttpd/1.4.31 

[Date] => Tue, 18 Feb 2014 06:23:14 GMT 

[X-Varnish] => 1977155788 1977155786 

[Age] => 75 

[Via] => 1.1 varnish 

[Connection] => close 

) 

Another way to increase page loading performance is to 
enable mod_expires which reduces the amount of new 
requests by browser caching pages. To do this you'll need to 
add a custom code to an -htaccess file located in the /var/ 
www folder and / or subfolders. The .htaccess file will be 
inherited from the /var/www folder, but it can be overridden 
in any subfolder. More about mod_expires can be found at 
Apache's website at http://httpd.apache.org/docs/2.2/ 
mod/mod_expires.html. Although you can allow files 
extensions like HTML to be cached, you may decide not to do 
that since the updated files will stay in the browser's cache 
until they timeout. If you don’t plan to change a lot of images, 
caching for longer can be very beneficial, though. 

You could also try the Ys/low extension for Firefox that’s 
used along with Firebug to find solutions for better 
performance. This highlights any issues with front-end code 
and your .htaccess file that might be slowing pages down. 


Setting up Heartbeat 

Heartbeat is a package that enables you to have another 
computer take over if one server fails. The main website 
(http://bit.ly/lolvtAc) can be used to answer some of your 
questions, but here we'll show you how to create a two-node 
cluster. The devices in this example are two Raspberry Pis 
with two different hostnames. The hostname Is defined in the 
/etc/hostname file and it’s critical that the two names are 
different. 

In this example, our main node is called raspberrypi and 
our second is raspberrypiz2. |n addition to the two distinct 
hostnames, both devices need their own static IP address. In 
this example, the main node has an IP of 192.168.0.106 and 
the second 192.168.0.107. To summarise the entire IP fallover 
process: An IP address is created that’s not used by another 
device and this is used for port forwarded in the router. In our 
example that’s 192.168.0.120. The Apache server will display 
the website from the main node 192.168.0.106 under the 
alias of 192.168.0.120. But, if Apache fails on raspberrypi, 
raspberrypi2 with the IP of 192.168.0.107 takes over. 

The files which we will need to edit are /etc/network/ 
interfaces, /etc/hosts and /etc/hostname. 

Additionally, the files which will need to add on both 
machines are /etc/ha.d, /etc/ha.d/haresources, /etc/ 
ha.d/ha.cd and /etc/ha.d/authkeys. 

First lets set those static IPs on both nodes. Both files will 
be the same on each Pi except for the IP address. The 
example below shows the IP from the main node. 

vi /etc/network/interfaces 
auto ethO 
iface eth inet static 

address 192.168.0.106 

netmask 255.255.255.0 

gateway 192.168.0.1 


Never miss another issue Subscribe to the #1 source for Linux on page 30. 


You'll need to edit the hosts file for both nodes. Examples are 
shown below for each device. Note: when making new files, 
you may want to create a copy of the original file, as shown in 
the example below. 

// Node #1 

cp /etc/hosts /etc/hosts.bak 

vi /etc/hosts 

192.168.0.106 raspberrypi 

192.168.0.107 raspberrypi2 

#192.168.0.120 cluster 


and for Node 2: 
//Node #2 
127.0.0.1 localhost 


192.168.0.106 raspberrypi 

192.168.0.107 raspberrypi2 

192.168.0.120 cluster 

Next, install Heartbeat on both nodes with apt-get install 
heartbeat and create a file called haresources, also on both 
nodes. They will both have a line that has the IP you created. 
vi /etc/ha.d/haresources 

raspberrypi 192.168.0.120/24/ethO apache2 
Create a file called authkeys and add the three lines of code 
shown below: 

vi /etc/init.d/authkeys 

auth 1 

1 shal mypassword 
and give the file O600 permissions: 

chmod 600 /etc/ha.d/authkeys 
Create a file called ha.cf on both nodes. The code will be the 
same. You can use the code block below with the relevant 
node IPs: 

vi ha.cf 

logfacility localO #used to tell heartbeat which log facility to 

utilize for logging 

keepalive 2 #interval in seconds(or can be 2000ms) between 

heartbeat packets 

deadtime 5 # timeout before the second node takes over 
udpport 694 #listening port for broadcasts instantiated by 

heartbeat 

bcast ethO #broadcast device 

node raspberrypi # hostname for node 1 

node raspberrypi2 # hostname for node 2 

auto_failback on # important for auto failover 

Make sure Apache service is on both machines and start 

(restart) the Heartbeat service on both machines with 
service heartbeat start. 


Staying up and backing up 

Now that your hardened server is up and running, you'll want 
to keep it that way. A few ways to do this are to ensure that 
Apache is configured to run on boot, then run a cron job from 
another Linux machine to ping your website and send any 
alerts if the ping in unsuccessful, and also use a static IP. If 
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your front-end 
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could quite easily end up with the wrong IP. The whole idea is 
that you always want the same local IP no matter what. 

Once you have set up the server, you'll want to implement 
a backup method too. Your backup could be a tarball you 
create every so often, an rsync cron job that backs up all 
website files to another hard disk, or a backup disk that is a 
cloned version of the hard disk that’s created with the dd 
(data description) command. 

With dd, you can set the boot to use the USB stick as the 
root directory. This method makes it very fast and easy to 
replace the malfunctioning disk with a new, identical copy. If 
you follow the USB route to host the website, you could use a 
tool like Clonezilla to make identical copies. 

After going through the possible setups and our little 
guides for Heartbeat and Varnish etc, you should have the 
knowhow to serve files quickly from your home web server to 
the internet and keep it up and running smoothly. 

Although a home server is a cheap and relatively easy to 
setup, it doesn't offer the fast hardware and download/upload 
speeds of hosted packages. Once you feel you've outgrown a 
home hosting setup, you can always find a dedicated web 
hosting package that has the resources you need. Speed and 
reliability can be achieved through efficient coding, adequate 
hosting setups and powerful hardware. 

If you use hosted solutions, you'll also be able to get 
acquitted with software like Cpanel and Plesk, which can 
make website administration simpler. Although these may 
well lack all the tools you need, you can always use your 
command line skills acquired from using a home server to 
create custom reporting. Ultimately, if you get comfortable 
with command-lining, FTP and SSH on your own server, you'll 
have all the tools necessary to build and manage small and 
large amounts of content from anywhere. 





Hosting setup options | 


If you do decide to build a home web server, you 
can basically use any medium on which you can 
install a standard Linux distro, which includes SD 
cards and USB sticks. If you have an old laptop 
or desktop kicking around or find a bargain PC 
on Craigslist, you can start with that. In fact, you 
could use a really cheap partly broken computer 
with a faulty hard drive. With this machine, you 


can just set the BIOS to boot from USB and that 
would enable you to run Linux on a £3 USB stick. 
lf you want a new, clean piece of equipment, 

an affordable option is the amazing Raspberry Pi. 
All of the gadgets like a power supply, SD card 
and Ethernet cable can be purchased for less 
than £100. We'd sugest checking out http://bit. 
ly/N30GF1 on the eLinux.org website to find out 


what gadgets are currently compatible with the 
Raspberry Pi. 

Finally, if you only want to use the setup for 
testing once in a while, you can use a persistent 
USB stick on any computer when you boot from 
USB. For long term use, the Raspberry Pi could 
be a good choice since it uses very little power 
and it can easily be stored almost anywhere. 
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custom video player 


lan Devlin shows you how to use HT ML5's media API to build a custom 
player with a UI that will stay consistent no matter what browser you use. 





lan Devlin wishes 
he could travel 
back in time. Not 
so he can make a 
killing on the stock 
market, but to tell 
Tim Berners-Lee 
to patent the 
World Wide Web 
and its content so 
he could ensure 
that everything 
remained free 
for everyone. 










audio and video files directly in the browser without the 

need for third-party plug-ins, via the <audio> and 
<video> elements. But since the specification doesn't 
define how the controls for audio and video files should 
look, each browser vendor has designed its own interface 
for its player, which of course provides a different user 
experience for each browser. 

But if you want to provide a consistent interface to your 
media files, you can build your own player, via a combination 
of HTML, CSS and the HTML5 media API. If you aren't 
familiar with this API, I’ve included an introduction to some of 
the relevant features of the API in the accompanying 
download for this tutorial on the LXFDVD. 


|: common knowledge that HTML5 enables you to play 


Building the media player 
To begin, all you need is your favourite HTML editor, Gedit or 
Kate should suffice for most people. If you wanted, you could 
sit down and design the player beforehand — but since we're 
not designers, we won't be doing that. First of all, we need a 
simple HTML page template to contain our player: 
<!IDOCTYPE html> 
<html lang=’en’> 
<head> 
<meta charset=’utf-8’ /> 
<title>Sample HTML5 Media Player</title> 
<link href=’media-player.css’ rel=’stylesheet’ /> 
<script src=’media-player.js’></script> 
</head> 
<body> 
<div id=’media-player’> 
<video id=’media-video’ controls> 
<source src=’parrots.mp4’ type=’video/mp4’> 


<source src=’parrots.webm’ type=’video/webm’> 
</video> 
<div id=’media-controls’></div> 
</div> 
</body> 
</html> 

As you can see, we're including a CSS file, which will 
contain the styling for our media player, and a JavaScript file, 
which will include the code controlling the player. Note: we 
won't be going into the CSS for the player in this article. 

There's also a video element, defined via two initial source 
elements: the test video is in MP4 and WebM formats. Notice 
we have set the controls attribute for the video element, even 
though we want to define our own control set. It’s better to 
switch off the controls via JavaScript in case the user has 
JavaScript disabled. The div with the id=“media-controls’ 
will contain exactly what it says. 

First, we need to initialise our player, which we do via 
JavaScript. Moving to our JavaScript file, we'll define a 
function called initialiseMediaPlayer() which we need to call 
when the document is loaded. To do this we add a listener for 
the DOMContentLoaded event: 

document.addEventListener(“DOMContentLoaded”, 
function() { initialiseMediaPlayer(); }, false); 

In addition, we'll need to define a global variable to store a 
handle to our media player: 

var mediaPlayer; 

Our initialiseMediaPlayer() function will simply obtain a 

handle to our media player, and then hide the controls: 
function initialiseMediaPlayer() { mediaPlayer = document. 
getElementByld(‘media-video’); 

mediaPlayer.controls = false; } 

Note: we're using the Boolean controls attribute from the 





The stop button pauses the media and rests it to its start position. 


The + and - buttons shown above control playback volume. 
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Browser support j 





One thing that sometimes catches people outis Audio 
which browsers support what media types, and 
how they can go about encoding their media 
files so that they will work with HTML5 native 
audio and video: 

Video 

)»> Firefox: Theora and WebM 

»> Chrome: Theora, MP4 and WebM 

») Opera: Theora and WebM 

»> Safari: MP4 

») IE9+: MP4 and WebM (via a plug-in) 

To ensure that your content is seen by as 
many visitors using different browser, you'll 
need to provide your video files in MP4, as well 
as both the open formats: Theora and WebM. 


Encoding 


API to hide the browser's default media player control set. 
Now we're going to start adding buttons: most 
importantly, the Play button. Since many media players use 


one button to alternate between play and pause functionality, 


we'll do the same. To define the button, add this code: 
<div id=’media-controls’> 
<button id=’play-pause-button’ class=’play’ title=’play’ 
onclick=’togglePlayPause();’>Play</button> 
</div> 


Adding the buttons 


This defines a Play/Pause button with appropriate attributes. 


When it is clicked, a JavaScript function called 
togglePlayPause() will be called. The CSS play class defines 
the button as a Play button with an appropriate image. 
Naturally, this button won't do much until we write the 
togglePlayPause() function to switch the button between 
play and pause modes. The function itself is fairly 
Straightforward, so we'll dive straight in and then have a 
closer look at it: 
function togglePlayPause() { 
var btn = document.getElementByld(‘play-pause-button’); 
if (mediaPlayer.paused || mediaPlayer.ended) { 
btn.title = ‘pause’; 
btn.innerHTML = ‘pause’; 
btn.className = ‘pause’; 


mediaPlayer.play(); 
} 
else { 

bin.title = ‘play’; 


btn.innerHTML = ‘play’; 
btn.className = ‘play’; 
mediaPlayer.pause(); 
} 
} 


First, we obtain a handle to our Play/Pause button for use 
throughout the function. Then we check the media player's 
paused and ended attributes to see if the media has been 
paused or it has ended. If so, we need to play the media and 
display the button as a pause button, so we change its title, 
HTML text and class name, then call the play() method on 
our media player. 

If the media player has not been paused or ended, we can 
assume that the media is playing, so we need to pause it, 


») Firefox: Ogg Vorbis and WAV 
» Chrome: Ogg Vorbis, MP3, MP4 and AAC 
»> Opera: Ogg Vorbis and WAV 
»> Safari: MP3, AAC and MP4 
»> IE9+: MP3, AAC and MP4 

To cover the latest browsers, it is 
recommended to provide your audio files in 
both Ogg Vorbis and MP3 formats. 


Usually you will only have your media files in one 
format, and it may even be one that none of the 
browsers support. So how do you go about 
converting them? 


There are a number of free tools out there 


that make this task incredibly simple. The Miro 
Video Converter (www.mirovideoconverter. 
com) is one of the best, and you can also use 
Online Convert (www.online-convert.com) to 
convert files online, oddly enough. 

Additionally, if your MP4 file doesn’t start 
playing until it’s completely downloaded, it’s 
probably due to the fact that the file information 


(which is contained in the file index) is at the 
end of the file rather than at the start, and the 


(http://bit.ly/ MyvXwk). 


pause() method to pause the media itself. 

Since we're going to want to change the title, innerHT ML 
and className values of various buttons throughout the 
code, it makes sense to define a function that does that for 
us: changeButtonType(). We will use it from now on: 

function changeButtonType(btn, value) { 

btn.title = value; 

btn.innerHTML = value; 

btn.className = value; 

} 

We're also going to need a Stop button: 

<button id=’stop-button’ class=’stop’ title=’stop’ 
onclick=’stopPlayer();’>Stop</ 
button> 

The media API doesn't provide a specific stop method, 
because there's no real difference between pausing and 
stopping a video or audio file. Instead, our stopPlayer() 
function will simply pause the media and also reset the 


currentTime attribute to O, which effectively moves the media 


back to the start position: 
function stopPlayer‘() { 
mediaPlayer.pause(); 
mediaPlayer.currentTime = 0; 
} 
Next, we'll add separate buttons for increasing and 
decreasing volume: 
<button id=’volume-inc-button’ class=’volume-plus’ 


browser is waiting to read this before allowing 
the file to be played. This can easily be moved to 
the start of the file using QT/ndexSwapper 





> The custom 
player, complete 
with progress bar 
and now we have 
replay control. 


then set the button to be a play button. This time, we call the title=’increase volume’ » 
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onclick=’changeVolume(“+”);’>Increase volume</button> 


<button id=’volume-dec-button’ class=’volume-minus’ 
title=’decrease volume’ 
onclick=’changeVolume(“-”);’>Decrease volume</button> 


</div> 


When each button is clicked, we call the changeVolume() 
function with a parameter that indicates the direction (we use 
a plus and minus sign here): 

function changeVolume(direction) { 
if (direction === ‘+’) mediaPlayer.volume += mediaPlayer. 


volume = 1 ?0:0.1; 


else mediaPlayer.volume -= (mediaPlayer.volume == 0 ? 0: 


0.1); 


mediaPlayer.volume = parseFloat(mediaPlayer.volume). 


toFixed(1); 
} 


This function checks the parameter and modifies the 
value of the media player's volume attribute. The attribute 
has a range between O and 1, so increments or decrements 
are made in steps of 0.1, checking for adherence to min and 
max values. We use parseFloat() and toFixed() to set the 
value to one decimal place. 

In addition, we should add a Mute button: 

<button id=’mute-button’ class=’mute’ title=’mute’ 
onclick=’toggleMute();’>Mute</button> 

And also a toggleMute() function: 

function toggleMute() { 

var btn = document.getElementByld(‘mute-button’); 

if (mediaPlayer.muted) { 
changeButtonType(btn, ‘mute’); 
mediaPlayer.muted = false; 


} 


else { 


changeButtonType(btn, ‘unmute’); 
mediaPlayer.muted = true; 


} 
} 


This function is similar to togglePlayPause() in that we 
check one of the media player's attributes, in this case muted. 
If it is set, the button needs to become a mute button and the 


> lan Devlin’s 
book — which 
he’s plugging 
here, the cheeky 
pup — is a more 
detailed intro 

to in-browser 
multimedia 
(http:/ /bit. 
ly/1pCtTDh) 


control set: 


HTML5 


Multimedia 
DEVELOP AND DESIGN 


lan Devlin 
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media player unmuted: If not, the button needs to become an 
unmute button and the media player muted. 

Finally, we'll add a replay button to replay the media file 
currently loaded. We'll make this button the first one in the 


<button id=’replay-button’ class=’replay’ title=’replay’ 
onclick=’replayMedia();’>Replay</button> 
The JavaScript for replayMedia() is quite straightforward: 


function replayMedia() { 
resetPlayer(); 
mediaPlayer.play(); 

} 

All we need to do is reset the player 
and then call the play() method on 
our player. Our resetPlayer() method 
looks like this: 
function resetPlayer() { 

mediaPlayer.currentTime = 0; 
changeButtonType(playPauseBtn, 
‘play’); 
} 

This function resets the media's 
play position via the currentTime 
attribute and ensures that the Play/ 
Pause button is set to play. We'll add 


www.linuxformat.com 


to this function later. 

Media players usually provide a progress bar that 
indicates how much of the video has been played. For this, 
we're going to take advantage of the HT ML5 progress 
element, which is supported in the latest versions of all 
browsers and so it’s a perfect candidate to display this 
information. 

<progress id=’progress-bar’ min=’0’ max=’100’ value=’0’>0% 
played</progress> 

To track the video as it’s playing and update the progress 
bar, we listen out for the timeupdate event, which is raised as 
the media is playing. Every time this event is raised, we can 
update our progress bar. So within initialiseMediaPlayer() 
function we need to wait and act on this event: 

mediaPlayer.addEventListener(‘timeupdate’, 
updateProgressBar, false); 

Now when the timeupdate event is raised, the 
updateProgressBar‘() function will be called, which we define 
as follows: 

function updateProgressBar‘() { 
var progressBar = document.getElementByld(‘progress- 
bar’); 
var percentage = Math.floor((100 / mediaPlayer.duration) * 
mediaPlayer.currentTime); 
progressBar.value = percentage; 
progressBar.innerHTML = percentage + ‘% played’; 
} 

Here, we get a handle to the progress bar, work out how 
much of the media has played using the duration and 
currentTime attributes, and set the progress bar value to that 
amount. We also update the element's HTML text for 
browsers that don't support the progress element. 

We must also reset the progress bar in resetPlayer(), 
which becomes: 

function resetPlayer() { 

progressBar.value = 0; 

mediaPlayer.currentTime = 0; 

changeButtonType(playPauseBin, ‘play’); 

} 

Our player now successfully displays the progress of the 

media as it is played. 


Handling default controls 


Although we have disabled the browser's default control set, 
it’s still possible for a user to access the defaults: in Firefox, 
by right-clicking on our media player, for example. If a user 
controls the media this way, some of the controls within our 
control set will go out of sync. 

We can fix this small issue by listening out for the events 
that are raised by the browser when a user interacts with the 
media player in this way, and acting accordingly. 

For the Play and Pause buttons, all we need to do is listen 
for the play and pause events and change the text of the 
buttons as necessary: 

mediaPlayer.addEventListener(‘play’, function() { 
var btn = document.getElementByld(‘play-pause-button’); 
changeButtonType(btn, ‘pause’); 

}, false); 

mediaPlayer.addEventListener(‘pause’, function() { 
var btn = document.getElementByld(‘play-pause-button’); 
changeButtonType(btn, play); 

}, false); 

Similarly, for the Mute button, we need to wait for the 
volumechange event — which is raised when either the 
player's mute or volume values change — and update the 





Media player plug-ins - 


There are a number of good media players out 
there that you can use off the shelf, should you 
want to. These players also make use of the 
HTML5 media API to provide a consistent UI 
across different browsers. In addition, some of 
them provide fallback to Flash for browsers that 
don't support HTML5 video or don't support the 


Mute button’s text: 
mediaPlayer.addEventListener(‘volumechange’, function(e) { 
var btn = document.getElementByld(‘mute-button’); 
if (mediaPlayer.muted) changeButtonType(btn, 
‘unmute’); 
else changeButtonType(btn, ‘mute’); 
}, false); 
Now our custom controls will remain in sync if a user 
chooses to use the browser's default control set rather than 
our lovely custom-built ones. 


Implementing a playlist 


To complete our media player, we'll add a playlist. To start, we 


need an actual list of items that we want to add to our playlist: 


<div id=’media-play-list’> 
<h2>Play list</h2> 
<ul id=’play-list’> 
<li> 
<span class=’play-item’ onclick=’loadVideo(“parrots. 
webm”, “parrots.mp4”);’>Parrots</span> 
</li> 
<li> 
<span class=’play-item’ onclick=’loadVideo(“paddle- 
wheel.webm”, “paddle-wheel.mp4”);’>Paddle Steamer 
Wheel</span> 
</li> 
<li> 
<span class=’play-item’ onclick=’loadVideo(“grass. 
webm”, “grass.mp4”);’>Grass</span> 
</li> 
</ul> 
</div> 
As with our initial video elements, we provide our video 
files in both MP4 and WebM formats. When a user clicks on 
an item, these are passed to a loadVideo() function, which of 
course we must define: 
function loadVideo() { 
for (var i = 0; i < arguments.length; i++) { 
var file = arguments|i].split(‘.’); 
var ext = file[file length - 1); 
if (canPlayVideo(ext)) { 
resetMediaPlayer(); 
mediaPlayer.src = arguments|i]; 
mediaPlayer.load(); 
break; 


} 
} 


First, we retrieve the function's variable arguments 
(we may have only provided one video source file, or perhaps 
more than two). For each video file, we obtain the file's 
extension. We need to check if the web browser can actually 
play this type of file, so we define another function, 





file format that’s provided. Some of them even 
support video subtitles via the WebVTT (Web 
Video Text Tracks) format. 

Here are some good examples of the plug-ins 
that are available: 
»> MediaElement.js — www.mediaelementjs.com 
»> jPlayer — www.jplayer.org 


)) LeanBack Player — www.leanbackplayer.com 
»> Playr — www.delphiki.com/htmI5/playr. 
»> Video.js — www.videojs.com. 

Gerrit van Aaken has compiled a useful table 
comparing the features of common HTML5 
video (and audio) players. You can find it at 
www.praegnanz.de/htmi5video. 


> Our finished 
media player, 
complete with a 
playlist of video 
files available. 





canPlayVideo(), which will do just that: 
function canPlayVideo(ext) { 

var ableToPlay = mediaPlayer.canPlayType(‘video/’ + ext); 

if (ableToPlay == ‘’) return false; 

else return true; 

} 

This function simply calls the canPlayType() method of 
the media API. You can find more information about this in 
the supporting material for the tutorial on the LXFDVD. If an 
empty string is returned, we assume that the browser cannot 
play this file; otherwise, we assume that it can. If the 
canPlayVideo() function informs us that this particular video 
file can indeed be played, we need to reset the media player, 
which we do via the resetPlayer() function we added earlier. 

Finally, we need to load the new video file into the player 
by setting its src, then calling the load() method on the player 
itself. The new video is now ready to play and enjoy. You can 
see what it will look like with the demo we've made of the end 
result at http://bit.ly/LXFhtml5vid. 

This tutorial on HTML5's excellent built-in multimedia 
features has only covered the basics of what you can achieve 
using the media API. 

There’s so much more that you can do than just providing 
a custom control set for a HTML5 media player. While we've 
concentrated on video, the code we've used can be very 
easily adapted to support HTML5 audio instead of or as well 
as video. 

We could also have added extra controls, such as timed 
displays for the media, buttons for skipping to the beginning 
and the end of the media, or the ability to skip forward and 
back within the media via the progress bar. There's plenty of 
great information out there so why not explore the online 
documentation for the API (www.w3.org/TR/html5) and 
see if you can add these features to the player yourself? 
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> There’s a wealth of resources to help you get started running tasks 
on the Grunt official site (http:/ /gruntjs.com). 
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remained largely unchanged for a number of years as 
a manual process of managing assets, writing code 
and then testing that code in browsers. Tools have existed for 
checking code quality and simplifying certain tasks, but these 
have been run manually and, as such, tend to get forgotten. 

Programmers, however, are used to running a build 
process of some kind when they want to release code. As well 
as compiling their code for output, they typically check code 
quality against a predefined benchmark, run unit tests for 
each of their functions, and run other automated tasks as 
needed for their solution. Not everyone has that 
programming background and web development may be 
something you've just been learning in your spare time, but 
we'll show you how to simplify your workflow and improve 
code quality by applying this same principle to our work using 
Grunt (http://gruntjs.com), the JavaScript task runner. 

Gruntis for anyone developing for the web who wants to 
run tasks automatically on their code base, such as 
JavaScript file linting (checking for syntax errors and 
inefficient code), unit testing (See Grunt Unit Testing, p89) 
and minification (removing unnecessary characters from 
source code), Sass compilation to CSS, or integration tasks 
with other systems. If you're working in a team, you can store 
your Grunt project configuration with the rest of your code, 
allowing everyone to share the same set of tasks. In fact, 
Grunt is used by many companies and project teams globally, 
including Adobe, Twitter and jQuery. We use Grunt on almost 
every project we run at AKQA (www.akqa.com). 

We first need to install Grunt’s only dependency, Node.js 
(http:/ /nodejs.org). Node is a platform for running 





T he day-to-day workflow for most web developers has 
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JavaScript applications on a server or command line, which, 
as you may have figured, means that Grunt is written entirely 
in JavaScript. 

Packages are installed for Node using the Node Package 
Manager (NPM) (https://npmijs.org) command-line tool. 
Grunt is one such package, as are its tasks. Before we start 
using Grunt itself, we need to install the Grunt Command Line 
Interface, which provides access to the Grunt command line 
tool globally across your system. 

Open up Terminal you'll need to install the NPM first and 
then install the Grunt CLI by executing the following 
commands at the prompt: 

sudo apt-get install nom 
sudo npm install -g grunt-cli 


Adding Grunt to your project 
Let's imagine we have a small project we're working on which 
contains a HTML file, an image, a JavaScript file and a CSS 
file, arranged within a project folder as shown below. The 
contents of these files are irrelevant for this tutorial, though 
example code is supplied on the LXFDVD: 
- index.html 
- img/logo.png 
- js/my-project.js 
- css/my-project.css 
To enable Grunt to run against the project, we need to 
create two files in the project root folder: a Node package file 
and a Grunt configuration file. 
A Node package file is a text file containing JSON- 
formatted project properties together with a list of node 
package dependencies required by the project, one of which 


Linked [i 


) The Node.js application platform is built upon Google’s V8 
JavaScript engine (https://code.google.com/p/v8/). 
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| encourage developers in my team to write unit 
tests for their JavaScript code. These are a 
series of small functions that call the main 
functions of the original JavaScript code with 
different inputs and test to see if their outputs 
are what they should be. 

The theory is that, if a change gets made to 
the original function, these tests can be run in 
isolation on that function and ensure that the 
rest of the code that relies on that function 
won't trip up. If the test throws an error, the 
original function should be updated to ensure 
that test passes. My preferred unit testing 
framework in JavaScript is Jasmine 
(http://jasmine.github.io) as the tests written 


will be Grunt in our case. Naming this file package.json and 
using properties defined in the nom package file specification 
(https:/ /npmjs.org/doc/json.html) means that the 
associated project can be installed together with its 
dependencies in a similar way to other node packages. 

Create a new text file in the project root, name it package. 
json and initialise it with the following JSON-formatted 
properties. If you're using a source code control system, such 
as GitHub, ensure you commit this file as it will be required by 
all developers working on your project. 


{ 

“title”: “My project”, 
“name”: “my-project”, 
“version”: “0.1.0” 

} 

Here we assign a human-friendly title for this Node 
package, a machine-friendly internal name and a version 
number according to the Semantic Versioning format 
(http://semver.org). [he latter two properties are essential 
for any Node package so make sure that you don't leave 
them out. 

What's missing now are the Node package dependencies 
required for our project. The most important of these to us is 
Grunt. The simplest way to define a dependency and 
download it at the same time is to execute the following on 
the command line in your project directory, replacing 
<package> with the name of the dependency. The --save- 
dev option indicates that the package file should be updated 
as well as the dependency being installed locally. 

npm install <package> --save-dev 

We want to define Grunt as a dependency for our little 
project, so let’s do that by executing the following from the 
command line. 

npm install grunt --save-dev 

You'll see all the files downloading within a new node_ 
modules folder created within your project folder. If you open 
the package file again, you'll notice the following section has 
been added automatically to its JSON structure. 

“devDependencies”: { 
“grunt: ‘~0.4.1" 
} 

This specifies a version number for Grunt in the project 
package file, so you can use different versions of Grunt for 
different projects. Now we've created our package file, if you 
have a new developer to introduce to your project, ask them 


in its format are easy to read, to group together 
logically, and don't require any other libraries to 
ensure they work correctly. 

As you may expect, there’s a Grunt plug-in 
(http://bit.ly/leKW660) for running these 
Jasmine tests alongside your other tasks, which 
is Simple to use and very powerful. With its 
simplest configuration, you tell it the location of 
your JavaScript files to be tested and the unit 
test files you have written, and it runs them in 
turn, aborting the Grunt task if any single test 
fails to produce the required result. 

This helps ensure that all code is tested and 
fixed before committing back into your source 
code repository. The tests themselves run in 





PhantomJS (http://phantonjjs.org), which is 
known as a ‘headless browser: It’s named as 
such since it runs on the command line and has 
no visible user interface. This enables the 
JavaScript unit tests to be run within a 
simulated DOM environment without any visible 
output. The output instead is fed back to 
Jasmine, which determines whether the results. 
The Jasmine plug-in supports mixins, which 
provide enhanced functionality. My favourite is 
Istanbul (http://bit.ly/leKVKwZ), which 
produces a report detailing what percentage of 
your code is run during those tests. | enjoy 
seeing that coverage count go up to 100 per 
cent, meaning all my code has been tested. 
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to download Node, Grunt CL/ as well as the project folder 
onto their machine. Next, tell the new contributor to navigate 
to the project folder on the command line. 

Execute the following: 

npm install 

Node will then download all the dependencies 
automatically according to the specific version numbers 
listed in the package file, and placing them within a node_ 
modules folder. Simple as that! A word of advice: avoid 
committing this folder to source code control; let each 
developer download the files locally to their machine using 
npm and the package file. 


Installing JSHint 


All Grunttasks are Node packages, just like Grunt itself, so we 
need to specify each task as a dependency in the same way 
to make it available to our project. 

Let’s assume we want to use JSHint (www.jshint.com) to 
perform static JavaScript code analysis on our project, 
checking for possible errors and enforcing a consistent set of 
coding conventions across all the JavaScript files in our 
project for all developers working on it. This is a task perfect 
for Grunt, and a task called grunt-contrib-jshint exists as a 
Node package for us to use that does just this. As a tip, we 
found a simple web search for ‘Grunt JSHint’ will locate this 
task for you with better certainty than the package search 
within the nom registry itself. »> 
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Somebody’s watching me 


Installing this task and adding it as a dependency to your 
package file is as simple as executing the following command: 

npm install grunt-contrib-jshint --save-dev 

The package files will download and we're ready to move 
on to configure the task. 

With our package file created, let’s move on to the create 
the second of the two files we need get tasks running with our 
project: the Grunt configuration file. Create a new file in the 
project root folder and name it GruntFile.js. 

This is the specific JavaScript file name that Grunt seeks 
out to discover which tasks to run and how. The configuration 
file follows the same basic structure for every project. Add the 
following ‘wrapper’ function to your new file, which will contain 
all the Grunttask settings and configuration. 

module.exports = function(grunt) { 
// Configuration 
// Plugins 
// Tasks 
}; 

This function's assignment to the module.exports 
property denotes that this file is in the CommonJS module 
format (http:/ /wiki.commonjs.org/wiki/ Modules) 
adopted by Node. Don't worry too much about that. However, 
do observe the Grunt parameter passed to the function, 
which is an object representing the Grunt API 
(http://gruntjs.com/api/grunt) and contains methods and 
properties for working with Grunt throughout the three 
distinct sections of code in the rest of the file: the 
configuration, plug-ins and the tasks. 


Creating the config file 
Let's skip the configuration section for the moment and jump 
ahead to the plug-ins section. This is where we register the 
tasks we added as dependencies in our package file earlier to 
make them available to run in Grunt. Add the following to the 
plug-ins section, which calls the API to register the JSHint 
npm task by name. 
grunt.loadNpmTasks(‘grunt-contrib-jshint’); 
According to the documentation for the JSHint plug-in, 
it registers a task within Grunt using the internal name jshint. 
This is the name we will use to refer to it from within our file. 
Moving ahead once again, the tasks section of the file 
allows several tasks to be grouped together into a single 
‘custom task, which enables them to be run together with a 
single execution of Grunt. Register a custom task named 
default, which calls the JSHint task by adding the following 


API call to the tasks section of the file. Extra tasks can be 
combined with this at a later stage by adding their internal 
names to the array. 

grunt.registerTask(‘default’, [‘jshint’]); 

Jumping back into the file, the configuration section 
represents the individual settings required to tailor each task 
to perform the way we want in our project. Add the following 
code to the configuration section of the file, which configures 
the JSHint task using a call to the Grunt API. 

grunt.initConfig({ 

pkg: grunt.file.readJSON(‘package.json’), 
jshint: { 
options: { 
strict: false 
L 
all: [‘GruntFile.js’, ‘js/<%= pkg.name %>.js’] 
} 

}); 
We begin the configuration by defining a property named 
pkg into which we've loaded the properties from the package 
file as a JavaScript object. This gives us access to the 
project's internal name and version number, together with its 
other properties without having to duplicate them across 
both files. 

We then add the configuration for the JSHint task within a 
property named after that task’s internal name. This 
configuration consists of a set of options, matching those of 
JSHint itself, allowing the specific rules for code compliance 
to be set in one place for use across any specified file or files 
in the whole project. Here we override JSHint's strict option, 
enforcing all checked functions to adhere to ECMAScript 5’s 
Strict mode (http://mzl.la/1cOroHf). 

The remaining property, all, denotes the ‘target’ of the task 
(the files to run JSHint against). We're choosing to check two 
files for compliance when the task runs: the configuration file 
itself and another file whose name is generated at runtime 
using the code delimited by the template strings <%= and 
%>. This code uses the internal project name from the 
package file, which we stored in the pkg property to generate 
the filename dynamically as my-project.js. 

Many Grunt tasks are built as ‘multi-tasks’ which means 
they can have multiple configurations, known as targets, for 
use in different circumstances. This adds a lot of power, and 
means that you could have a different set of rules for 
development on your local machine compared to those used 
before deployment to a live production server, for example. 





Once you become a seasoned Grunt user, and 
have managed to streamline your workflow right 
down, you'll find yourself looking to save time 
elsewhere. The time it takes to save your code, 
Open your command prompt to run Grunt, and 
then jump back to your code editor once it’s 
completed may start to feel like an eternity. 
Enter the grunt-contrib-watch plug-in 
(http://bit.ly/1pU2BZ8) and its watch task. 
This allows us to run other tasks whenever a 
specific file, or any one of a group of files, is 
added, saved, or deleted. 

For example, let's imagine you have a folder 
full of JavaScript files and you want to run 
JSHint on them as soon as a change is saved to 
any one of them, rather than jumping to the 
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command prompt to run Grunt each time. 
You install the plug-in as normal and configure 
the watch task to achieve your aim, as follows: 
grunt.initConfig({ 
watch: { 
files: [‘js/*.js’], 
tasks: [‘jshint’] 
} 
}); 

Now, by executing Grunt on the command 
prompt, it will run just the watch task, which will 
sit and listen for changes to any of the 
JavaScript files. As soon as a change is made, or 
a file added, it will trigger JSHint to run. 

Configuration can become more advanced, 
with different sets of tasks for different types of 


www.linuxformat.com 


file. For example, a Smush.it (www.smushit.com) 
task could be called automatically whenever a 
file is changed within a folder containing image 
files. The Smush.it tool squeeze out any 
unnecessary data from each image file type for 
to ensure they are as web optimised as possible. 
Or Sass files could be compiled down to CSS 
when any file with a SCSS extension is altered. 

The watch task also features integration with 
LiveReload (http://livereload.com) to really 
streamline your development flow. Once the 
watch task observes a change and runs its 
assigned tasks, it can trigger LiveReload to 
refresh the open page associated with your 
code within your browser. All of this, and all you 
need do Is press Save! 





In our target, we list two files for JSHint to run against 
using the specified options. We could replace this list with an 
object containing that file list along with a new set of JSHint 
options to override the initial set. Depending on our 
intentions, we could then add a further target with a different 
set of options altogether, which may or may not act against 
the same files. The flexibility provided by automating tasks 
and using multiple targets is what makes Grunt so powerful. 


Running Grunt for the first time 


With our configuration in place to run JSHint across two 
JavaScript files, let’s run Grunt to trigger the custom task we 
named default. At the command prompt, execute the 
following command in the project root folder. 
grunt default 
Grunt actually treats this particular custom task name as 
the default, so we can run the same command without 
specifying the task name as an option and achieve the 
same results. 
grunt 
Grunt runs JSHint on the configuration file and the project 
JavaScript file, as requested, and outputs the results in the 
following way: 
Running “jshint:all” (jshint) task 
Linting GruntFile.js... ERROR 
[L3:C5] E007: Missing “use strict” statement. 
grunt.initConfig({ 
Warning: Task “jshint:all” failed. Use --force to continue. 
Aborted due to warnings 
Grunt ran the JSHint task on the configuration file first 
and, because that file failed to meet our code compliance 
rules, it stopped running at that point, ignoring any other files 
or tasks. The exact line number and character that caused 
Grunt to abort is shown in the output and enables us to 
pinpoint the code that we need to change to enable Grunt to 
run successfully. 
Now, edit the configuration file and add the following line 
at the top of the wrapper function, enforcing ECMAScript 5 
Strict mode. 
“use strict”; 
end code 
Run Grunt again and it will output the following message: 
code 
Running “jshint:all” (jshint) task 
>> 2 files lint free. 


Done, without errors. 

In one shot we can ensure all our JavaScript files, even in a 
large project, adhere to the same rules, improving quality and 
code maintainability. We've essentially set up the beginnings 
of a front-end code build tool that, with some further 
configuration and extra tasks, could refuse to let us commit 
our code unless it passes strict code compliance rules. 

This can be automated to run as part of a deployment 
pipeline, ensuring only code that meets your strict quality 
control makes it through to your live website or web app. 

We've done all the heavy lifting, so adding extra tasks at 
this point is relatively simple. To prove this point, let’s add two 
Grunt tasks: one to provide a minified version of your project 
JavaScript file using the grunt-contrib-uglify plug-in 
(https://github.com/gruntjs/grunt-contrib-uglify), and 
another task which will automatically remove any 
unnecessary bytes from PNG or JPG format image files in 
your project, using the handy Yahoo! Smush.it service 
(www.smushit.com/ysmush.it) and the grunt-smushit plug- 
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in (https:/ /github.com/heldr/grunt-smushit). Download 
the plug-ins and save them as project dependencies: 
npm install grunt-contrib-uglify --save-dev 
npm install grunt-smushit --save-dev 
Next, we register the tasks, whose internal names are 
uglify and smushit, respectively, with Grunt within the 
configuration file. 
grunt.loadNpmTasks(‘grunt-contrib-uglify’); 
grunt.loadNpmTasks(‘grunt-smushit’); 

Then we add the tasks to our custom task list. 
grunt.registerTask(‘default’, [‘jshint’, ‘uglify’ , ‘smushit’}); 

Finally, we add the task settings inside the configuration 
object in the same file. The Ugiify task configuration maps the 
JavaScript project file to a new output file named my-project. 
min.js, and the Smush.it configuration points to the folder 
containing the images to compress. 

uglify: { 
all: { 
files: { 
‘js/<%= pkg.name %>.min.js’: ‘js/<%= pkg.name 
%>.js’ 
} 
} 
}, 
smushit: { 
path: { 
sre: ‘img/’ 
} 
} 

Et voila! If we run Grunt again then it will now enforce 
JavaScript code compliance, produce a minified output 
JavaScript file (which can be used instead of the original), 
while also compressing any unnecessary bytes out of the 
images, Saving us some time and ensuring better code with 
smaller file sizes. 

Grunt feels like a grown-up tool for working with web- 
based projects. We hope you can see the reasons why this 
author and his team at AKQA use it daily to streamline 
workflow, save time and ensure they build the best code they 
can in order to produce the best experiences for users. 

We encourage you to do some digging and investigate 
more for yourself. This will help you to better understand how 
to automate your repetitive tasks and improve your code 
quality for yourself and your team with Grunt and its vast 
library of tasks. Best of luck! 
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Answers 


Got a question about open source? Whatever your level, email it to Ixf.answers@futurenet.com for a solution. 











File Edit View Bookmarks ‘Settings Help 





This month we [nelz@hactar Lxf/Answers 0]% sudo fdisk -l lxfdvd182.iso " 
answer questions on: 
|Disk \xfdvd182.iso: 4.3 GiB, 4660615168 bytes, 9102764 sector 
Copying ISO © Desktops with 5) .. : Tee ee 
| (Units: sectors o = ytes a 
pens tee Sector size (logical/physical): 512 bytes / 512 bytes 
Recording on Pirefox OS | 11/0 size (minimum/optimal): 512 bytes / 512 bytes 

Raspberry Pi simulator Disklabel type: dos 
SMART error Security in pPisk identifier: @xeeee9000 
message Thunderbird | 







a 
. Device Boot Start End Blocks Id System 
Lxfdvd182.isol 1 9102763 4551381+ ee GPT 


[nelz@hactar 1lxf/Answers 0]% fj 


©) New laptop, no DVD | 
. | have bought myself a new laptop | 0 zsh @ Zsh @hactar - Friday 28 February - 12:44 
and it has no DVD drive. That is fine ] 

because | don’t use my computer 


to DVDs. However, it does make 
installing distros difficult. Some distros > The last two lines of this fdisk output show that ISO image can be booted from a USB stick. 







() hactar 





provide a IMG file that | can copy to a USB 
stick with the dd command, but most only 
have ISO files. | have tried UNetbootin but 


The situation these days is much image file is a hybrid, by using fdisk. 
simpler when it comes to using CD/ sudo fdisk -l lxfdvd182.iso 





only with partial success. Is there a reliable wim «te DVD images on USB sticks. Many this command includes this output 

way of putting an ISO image onto a USB ates now create hybrid ISO images, and Device Boot Start End Blocks Id 

stick, and what about my existing discs? these work well when written to a DVD or System 

Terry Jarvis a USB stick. There is an easy way to tell if an Ixfdvd182.isol 1 9102763 4551381+ ee 
GPT 


A hybrid image always contains a partition, 
which fdisk reports as the name of the image 
file with a number — usually 1 — added to it. If 
the image is not a hybrid, you will not see either 
of these lines. In that case, you can convert it 


e e with the isohybrid command, which is part of 

l et eC Ne WInner the Syslinux package. This is not normally 
installed by default, but is available in the 
software repositories of just about every distro, 
So install it in the usual way. Then you can 

et OO convert any bootable ISO image that uses 

isolinux (most of them do) with this command 
isohybrid /path/to/image.iso 
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Get your questions answered and exploit our generosity. Fethelinagerdoes riotlisethe-solnuk 
bootloader, it will use Grub2. Grub2 creates 
| Linux Format is proud Because we're nice chaps as well as hybrid images by default so it will pass the 
to produce the biggest —_Linux gurus, and because our offices have fdisk test. 
a _and best magazine very little storage space, we're giving one If you want to convert an existing disc, you 
~ about Linux and free lucky reader each issue the chance to win will first need to convert it to an ISO image and 
software that we can. A word count of some of the books that get sent to us for then perform the above steps (naturally, you 
LXF173 showed it had 67,659 words. About review. They're mostly reference books will need a computer with a DVD drive for this). 
as much as Heart of Darkness and Animal that will give your shelves an air of If the DVD drive is /dev/srO, this command will 
Farm combined, but with way more Linux, computational gravitas. For a chance to create an ISO image from it: 
coding and free software! win, email your question to Ixf.answers@ cat /dev/sr0 >somedistro.iso 
That's more than most of our competitors, futurenet.co.uk, or post it to www. Writing an isolinux image to a disc removes 
and that’s how we know that we're big. As for linuxformat.com/forums to seek help some of the information necessary for hybrid 
the best, well... that’s a subjective claim, but it’s from our lively community of readers. booting, so you will always need to run 
one we're happy to stand by. > See page 94 for our star question. isohybrid on it before writing it to a USB stick. 
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Terminals and 
superusers 


We often give a solution as commands to type in a 
terminal. While it is usually possible to do the same with 
a distro’s graphical tools, the differences between these 
mean that such solutions are very specific. The terminal 
commands are more flexible and, most importantly, can 
be used with all distributions. 

System configuration commands often have to 
be run as the superuser, often called root. There are 
two main ways of doing this, depending on your distro. 
Many, especially Ubuntu and its derivatives, prefix the 
command with sudo, which asks for the user password 
and sets up root privileges for the duration of the 
command only. Other distros use su, which requires the 
root password and gives full root access until you type 
logout. If your distro uses su, run this once and then run 
any given commands without the preceding sudo. 


Grub booting discs do not suffer this limitation, 
SO you can copy directly from the DVD to a 
USB stick. This has been the case with LXF 
DVDs since issue number 178, so you can use 
dd if=/dev/sr0 of=/dev/sdb bs=4k 
to copy the disc to a USB stick at /dev/sdb. 

If you are working with an ISO image file, the 
syntax for dd is 

dd if=/path/to/image.iso of=/dev/sdb bs=4k 

This command will overwrite the output 

device without warning, So make sure you have 
this right. The bs option is necessary or it will 
take forever. Even with a bs setting the copy will 
take a while, especially when copying directly 
from a disc. If you install dcfldd (http://dcfldd. 
sourceforge.net) you can use that instead 

of dd: this uses the same syntax, but has some 
extra options. It is more intelligent in setting the 
block size, making bs unnecessary, even 
undesirable. If it knows the size of the input file 
— which it will if you use an ISO file — it will 
display its progress. This doesn't make the 
copy work any faster, but at least you will know 
what is happening. 
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When you have downloaded ISO images of 
various distros, you will certainly have seen 
files with names such as cooldistrol.0.iso. 
md5 along with the ISO files, and may have 
wondered what exactly they are. 

An MD5 sum is a 128-bit cryptographic 
hash of a file's contents. The same file 
always generates the same sum, but alter 
just one bit of the original and it will have a 
completely different sum. MD5 was designed 
for security. By checking the MD5 sum, you 


can ensure a file has not been tampered with. 


MD5 is now used just as much for 
checking against accidental corruption 
during transfer. When you download an ISO 


© Raspberry capture 


| have a USB easycap video capture 
thingy plugged into my Raspberry 
. Pi. After a bit of faffing I’ve managed 
to get it to work. This command will show 
me the video ‘live’ 
mplayer tv:// -tv driver=v4]12:norm=PAL_ 
BGHIN:width=640: 
height=480:outfmt=uyvy:device=/dev/ 
videoO:input=1:fps=10 -vo sdl -hardframedrop 
Now, | would like to use it to record. 
However | can’t work out how to do it. 
bobthebob1234 
From the forums 
*  Thenormal way of recording anything 
you play with Mplayer is to use the 
“= «-dumpstream option. This outputs to 
a afile called stream.dump in the current 
directory, or any other file specified by the 
-dumpfile option. However, this doesn't always 
work with capture devices and webcams. You 
could try fiddling with the gazillion options in 
MEncoder, or alternatively, switch to the 
FFmpeg software that MEncoder often uses 
for recording and transcoding, . 
ffmpeg -f video4linux2 -i /dev/videoO out.mp4 
The -f option tells FFmpeg the video format 
— it can guess this from input files and output 
file extensions, but a stream from /dev/videoO 
needs this to be explicitly set. The input source 
is set with -i and the output goes to the file 
given at the end of the command line. It’s 
important to get the ffmpeg command line 
right, as anything that affects video formats 
applies to whatever follows it. The -f here 
appears before -i, but if you put it after -i it 
would apply to the output file. This is useful if 
you want to output to a stream or a file with 
a non-standard extension 
ffmpeg -f video4linux2 -i /dev/videoO -f mp4 
out.txt 









A quick reference to... 


image, make sure you get the MD5 file as 
well. It can be annoying if you waste time 
writing a file to a CD or trying to boot from it, 
only to find it has been corrupted. To prevent 
this happening, use this command 
md5sum cooldistro-1.0.iso 
This should result in the same string of 
hex digits as in the cooldistrol.0.iso.md5 file. 
Checking a bunch of 128-bit hex numbers 
against each other is probably not your idea 
of fun — or ours, we hasten to add. This 
would be particularly tedious if you had 
downloaded a lot of files. Therefore, you can 
let the software check the numbers for you 
with this command 
md5sum --check cooldistro-1.0.iso.md5 
This will let you Know whether or not the 
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will produce a valid MPEG-4 file. There are 
plenty of options to fiddle with in FFmpeg, but 
it does use sane defaults and the above 
command worked well with my webcam. Some 
options you may want to explore are: -b:v and 
-b:a to set the video and audio bitrates 
respectively, -t to set the duration of 

a recording, either as a number of seconds or 
as a HH:MM:SS time string, and -r to force 

a particular frame rate. To alter the resolution, 
use the -s option. How this works depends on 
where you use it. As part of the input 
specification, it sets the device to capture at 
that resolution (assuming the devices support 
it). If you place -s in the output portion of the 
command line, it scales whatever resolution 
the capture device sends to your 
specifications. This may take more CPU power 
than the Pi can handle in real time. 

Here is an example that uses all these 
options to record a10 second HD clip at 10fps 
with a bitrate of 1OOOkbps. 

ffmpeg -f video4linux2 -s 1280x720 -i /dev/ 
videoO -t 10 -r 10 -b:v 1000k out.mp4 


5) Old but SMART 


~~, My old-ish desktop PC is showing 

» a‘SMART: Secondary Master Hard 
* Status Bad’ error on booting. The 
oot updated a few months ago, but 
| am unaware if SMART was even configured 
previously to that. It has only one hard drive, 
configured as cable select. 

Googling the error message gives me 
everything from ‘disable in BIOS and ignore’ 
to ‘the world as we know it is doomed: 

The computer seems to be running pretty 
normally when | hit [F1] to continue the 

booting process. I’m more frequently 

backing up essential data though. 

GregS 

From the forums » 








checksum matches. The MD5 file can 
contain checksums for several files. 
For example, the Gnome sources come in a 
lot of files, but the MD5 sums are ina 
single file. By convention, this file is often 
named MD5SUMS. So you can download all 
the files you need, then check them in 
one go with 
md5sum -c MD5SUMS 
Similarly, you can also generate an 
MD5SUMS file with 
ms5sum *.iso >MD5SUMS 
SHAI1 and SHA256 files work in a similar 
way, but with a somewhat higher level of 
security. The principle is the same, as is the 
syntax, but use the shalsum and 
sha256sum programs instead. 
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We'd say there’s more than a touch of 
“ish” about it being old if it is still using 
IDE drives. To be on the safe side, 
replace the cable, and configure as either 
master or slave rather than relying on cable 
select, which can be a bit unreliable. This is 
unlikely to be the cause, but cables cost a lot 
less than new hard drives. 

SMART, or Self-Monitoring, Analysis and 
Reporting Technology to give it its full name, is 
self-diagnostic software built into modern hard 
drives. A SMART error doesn't necessarily 
mean your drive has failed, it means the 
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> Ashort self-test in the Smartmontools 
package can help with booting issues. 





SMART tests indicate a problem that may lead 
to failure. The advice to disable SMART in the 
BIOS is akin to fixing low oil pressure on your 
car by disconnecting the warning light — you'll 
feel better right up until the moment that 
disaster inevitably strikes! 

To get more information on the situation, 
install the Smartmontools package for your 
distro, open a terminal and run 

sudo smartctl -i /dev/sda 
to check that your drive is recognised. Then 
run the short self-test with 

sudo smartctl --test=short /dev/sda 

There are a number of tests you can run, 
with increasing detail, time taken and impact 
on system usage. The short test completes in 
a few minutes and can be run while the system 
is in use. The command returns immediately, 
you can see the progress and results with this 
command 

sudo smartctl -c /dev/sda 

Look for the lines reporting ‘Self execution 
status’ as this shows how much of the test 
remains and, once the test is complete, the 
outcome. If you see an error here, start backing 
up immediately. You usually see the last five 
errors with 

sudo smartctl --log=error /dev/sda 

In addition to smartctl, the Smartmontools 
package contain smartd, which is a daemon 
that runs in the background and keeps an eye 
on your disks. It will send you an email when it 
finds a potential problem. You will need to edit 
/etc/smartd.conf to set it up; the file contains 


comments explaining what to do. If you find all 
this command line activity a little intimidating, 
there is a graphical front end, called 
GSmartControl, but it does not give quite the 
same level of control. 


&) Misty MINT 

When running Mint 16 MATE Live 
from issue 181 of Linux Format, 

| can’t log in to the LXDE or 
Cinnamon desktops once I’ve logged out. 
While the desktops can be selected, they 
don’t work. They are shown at the login 
selection between the language and power 
buttons. Am | missing something? 

petion 

From the forums 

The live Mint environment is set to 
auto-login to the MATE desktop. If you 
want to use a different one, you need 
to leg out, select a different desktop from the 
login screen and then log in again. The last step 
is probably the one you are missing. After 
selecting your choice of desktop, you have to 
log in again, but the details to use are not 
obvious because auto-login was enabled in the 
first place. We did mention this on the DVD 
pages of the magazine, but with an unfortunate 
typographical error. 

Select your desktop of choice, and then 
type “mint” — without the quotes — into the 
login box. There is no password for the mint 
user, so after typing the name just hit [Enter] 
twice to load the desktop that you chose. 










cd 
Peer Winner! This month's winner is John Yates. Get in touch with us to claim your glittering prize! 





Very little helps 
| have been using the LTS version of 
Linux Mint 13, together with 
Thunderbird for my email 
requirements. | have had virtually no 
problems, but recently an ‘Add Security 
Exception’ window keeps popping up in 
Thunderbird, as it tries to connect to http:// 
pop3.tesco.net. It does no apparent harm, 
but it is irritating because | keep having to 
delete it by either confirming or cancelling. 
It inevitably pops up again, but the time 
interval when it recurs shows no regular 
pattern. | have searched the internet and the 
forums for a solution but to no avail. | have 
tried the advice from the Mozilla site on 
adding exceptions, but it does not help. 
Have you come across this problem and, 
more importantly to me, can you offer 
a solution to hide it permanently? 
John Yates 
SSL certificates perform two 
important functions. Firstly, they 
enable all data to be encrypted before 
transfer, otherwise your emails (or banking 
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details if you use an online commerce site) 
could be read in transit. The second, equally 
important, function is to identify the site. 

A certificate is issued for a specific domain or 
list of domains, and signed by a trusted 
certificate authority (CA). This means that you 
know you are connecting to the site to which 
the certificate belongs. Any attempt to use the 
certificate with another site, or modify it to 
include that site, will throw up a security 
warning like you are seeing. The short answer 
to this question Is that, as the message at the 
top of the window states, you should not be 
trying to add a security exception for such 

a site. In this case, the warning states that both 
the certificate belongs to a different site and 
that it is not signed, so you really should not 
be trusting it at all. 

Tesco uses Synacor to provide their 
services and it is Synacor who have the 
incorrect certificate. As you have found, even 
adding Synacor’s details to the exception does 
not work. In general, adding an exception to 
Thunderbird should work and can be used to 
accept the self-signed certificate on mail 
servers. The repeated failure that you're 
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experiencing is probably caused by Synacor 
running a cluster of servers on one 
incorrectly configured certificate, so this 
means that each time you hit a different 
server or IP address, you get the ‘Add 
Security Exception’ message. 

Tesco refuses to accept any degree of 
responsibility for the problem, claiming it is 
a fault with Thunderbird. (Thunderbird’s only 
fault here is checking that an SSL certificate 
is valid before trusting it.) You have a number 
of options, but none of them ideal. You can 
use Tesco’s webmail service, which is the 
only form of access they support. You can try 
setting Thunderbird’s SSL settings for the 
account to None. This will do everything in 
plain text, but isn't really recommended. 
Alternatively, you could switch email 
providers — to be perfectly honest, we think 
we'd rather have Google reading all our 
messages than trust a provider that 
potentially lets anyone read them. 

None of these solutions are anywhere 
near ideal, but it appears that trying to get 
Tesco to get their provider to fix their 
certificate is an exercise in futility. 





Answers 


{xx} |} [0] ge App Manager - Mozilla Firefox 
File Edit View History Bookmarks Tools Help 


(Causing the App Manager - Mozill... 


Help us to help you 


We receive several questions each month that we are 
unable to answer, because they give insufficient detail 
about the problem. In order to give the best answers to 
your questions, we need to know as much as possible. 

If you get an error message, please tell us the exact 
message and precisely what you did to invoke it. If 

you have a hardware problem, let us know about the 
hardware. If Linux is already running, you can use the 
excellent Hardinfo program (http://hardinfo.berlios. 
de) that gives a full report on your hardware and system 
for us to scrutinise. The report is an HTML file which you 
can attach to your mail. Alternatively, the output from 
Ishw (http:/ /ezix.org/project/wiki/HardwareLiSter) 
is just as useful. One or both of these should be in your 
distribution’s repositories. 

If you are unwilling, or unable, to install these, run 
the following commands in a root terminal and attach 
the system.txt file to your email. This will still be a great 
help in diagnosing your problem. 


uname -a >system.txt 
Ispci >>system.txt 
Ispci -vv >>system.txt 


fe App Manager snes ) | @ Firefox OS App Manager Add-onsQ i + i 








«; [ © Firefox about:app-manager 


© [Be ore 


Add Packaged App 





Add Hosted App 





> Firefox OS comes with a simulator, which you run from the Firefox browser. 


used to control a real Firefox OS phone, 
connected by USB cable, from within Firefox. 
When it is installed, return to the App Manager 
tab, where you will find a ‘Start Firefox OS’ 
button, which does what it says on the tin. 

For earlier versions of Firefox, go to Add-ons 
to search for and install Firefox OS 1.1 
Simulator. However, you will have to switch 
to the App Manager method when you 
upgrade to a newer version, so it may be 
advisable to upgrade to at least Firefox 26 
before you do anything else. 


© Firefox OS emulation 
How do | get Firefox OS emulation 
and run it under any Linux (like for 
ty Android OS emulation)? 
Mohee Jarada 

The Firefox OS emulator (or simulator 
as they prefer to call it) is run within 


Firefox OS you are emulating. With Firefox 26 
and newer, you use the App Manager, found in 
the ‘Tools > Web Developer’ menu. Click on the 
‘Start Simulator’ button at the bottom of the 
window and it will tell you that the simulator is 
not installed, with a button to install it. Click on 
this and it will take you to a webpage with an 
install button. Press this and choose the 
‘Firefox OS 1.2 simulator: There is also an 
option to install the ADB Helper add-on. This is 






i Firefox as an extension. The exact 
procedure for doing this depends on the 
version of Firefox you use and the version of 





’ Frequently asked questions... 


Remote desktops 


Is it possible to connect to my 
home computer from work and 
run a graphical program? 

Yes it is. There are two basic ways 
of doing this. 


What are the different options? 
The first is X forwarding, which is 
best when both computers run 
Linux. This works over an SSH 
connection. You run a program in 
the remote shell and it is displayed 
on your local desktop. For example 
ssh -X me@my.home.computer 
kmail : 
The -X tells SSH to use X 
forwarding. 


Is that all | need to do to run the 
program on my local computer? 
It is actually running on the remote 
one, but displaying its window on 
the local system. You may need to 
edit /etc/ssh/sshd_config to set 
‘X1lForwarding’ to ‘yes’ 


What if | want to display the 
whole desktop? 

X forwarding can open a new 
desktop session that displays on 
your local computer. 


But if | left a program running 
and want to get at its window, 
this won’t let me, will it? 

No, you need a remote desktop 
program for that, as you would if 
your local computer is running 
Windows. The most common 
option here is VNC (Virtual 
Network Computer). This is 

a server/client system. In this case, 
you have a VNC server running on 
your remote computer, and are 
running the client on your local 
system. Go to www.realvnc.com to 
find packages for all popular 
operating systems. These will allow 
you to access your Linux desktop 
from a Windows or Mac system, 
and vice versa. 


That sounds more like it. What 


software do | need? 


If you run KDE, you already have all 
you need as KDE has built in RFB 
(Remote Frame Buffer) software. 
RFB is the protocol used by VNC 


A modem link is not suitable. A 
broadband connection is feasible, 
but even with fast downstream 
ADSL speeds, upstream is unlikely 
to be more than 384kbps, so 
TightVNC is the better option. 


and compatible systems. With 


other desktops, install the VNC or 
Tight VNC package from your 


distro's repositories. 


What’s the difference between 


VNC and TightVNC? 
VNC is the original, 
whereas TightVNC 
(www.tightvne.com) is 
a version that was 
developed to make 
better use of lower 
bandwidth 
connections, by using 
increased 
compression. 


Is bandwidth 
important? Can 
| use this over a 
modem link? 


www.tuxradar.com 





Any other alternatives? 

NX (www.nomachine.com) is a 
proprietary system that manages 
good speed improvements. It is 
not open source and does not run 
on all Linux supported hardware. 


@ -¢ kX & Few 


A Mot cates QP scotenng tees Lame twats 





>» VNC allows you to access one 
computer’s desktop from another. 
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The best of the internet, crammed into a massive 4GB of quality DVD. 


ome 

people are — 

really into aiieas 
genealogy but | don’t care whether 
my great great grandfather was a 
postman or pirate. However, | find 
the genealogy of Linux distros 
more appealing. Three of the early 
distros are still going: Debian, 
Slackware and Red Hat. While none 
of those are on this month’s DVD, 
each of the distros we do have is a 
descendant of one of those. Ubuntu 
is the closest relation, being still 
based on Debian. They still use 
software from Debian packages 
and feed back to Debian. SUSE, or 
one of the spelling varieties it has 
gone through, was originally a 
repackaging of Slackware. They did 
make the break at some point when 
they started using their own RPM 
packages. They are no longer 
related but it’s fair to say that 
without Slackware there would be 
no OpenSUSE now. 

Mageia has gone through the 
most changes, being a fork of the 
Mandriva project, that’s still going. 
Mandriva itself was the result of the 
merging of Mandrake and the 
Brazilian Connectiva distro. 
Mandrake started life as a fork of 
Red Hat using KDE, at a time when 
KDE’s licencing was unacceptable 
to Red Hat. 

Tom tal) -R (= 
have it, children, 
grandchildren and 
distant cousins, 
all on the DVD. 





Important 


Defective discs 


In the unlikely event of your Linux Format 
coverdisc being in any way defective, 
please visit our support site at 
www.linuxformat.com/dvdsupport for 
further assistance. If you would prefer to 
talk to a member of our reader support 
team, email us at support@futurenet.com 
or telephone +44 (0) 1225 822743. 
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Network Sharing 


Join Mageia Local disks 
Community 
: Security 


Boot 


While it may have a name that sends my spell 
checker into apoplexy, Mageia is a rather good 
distribution with a fine pedigree. |, like many other 
long-time Linux users, started with its grandfather, 


Control Center [on testvm.digimed.co.uk 


« Manage your hardware 


Browse and configure 


eae ae Sound Configuration 
hardware 


« Configure graphics 


fam) Configure 3D Desktop |] Set up the graphical 
* effects server 


e Configure mouse and keyboard 


Set up the pointer 
device (mouse, 
touchpad) 


Set up the keyboard 
layout 


e Configure printing and scanning 


+ Set up the printer(s), 
= the print job queues, ... 


“ 


Set up scanner 





KDE is it’s true calling. However, unlike some other 
KDE versions of distros, Mageia is not content with 
the default appearance. The distro has taken the 
trouble to create a highly pleasing KDE desktop, 


Mandrake Linux. Like its forebears, Mageia is aKDE which you can try for yourselves simply by booting 


based distro, other desktops are available for it but 


OpenSUSE 13.1 


On the face of it, Mageia and OpenSUSE have 
many similarities. They have both been around for 
many years — with several changes of owner and 
name, both choose KDE as their preferred desktop 





www.linuxformat.com 


this month’s cover disc. 


and both have a central administration centre. 
However, they are very different to use — which 
can only be a good thing, it shows the choices that 
can be made. As with other distros on the DVD 
this month, this is a bootable live distro. You can 
run it from the DVD without it touching your hard 
drive, the perfect way to 
try anew Linux distro, or 
your first. If you are new to 
Linux, Ubuntu, the third 
distro we've supplied, has 
a long track record of 
working well for new users. 
The latest version 13.10 
has been out for a few 
months now, and has 
received several updates, 
SO we re giving you a 
remastered version with all 
those updates included. 


New to Linux? 
Syl am an 


» What is Linux? How do | install it? 


The best update of 2014, 


find out why and try it today. 
SSS 13.1 


» How do | install software? 
Open Index.html on the disc to find out 


[Bs4T=K] Pius The best FOSS HotPicks, code and books. 


3D printing 
Try the software side of 3D printing with Blender. 
Tutorial code 


Grab all your source code for this month's tutorials. 


Web dev workflow 


Smooth runnings: improve your web workflow with Grunt. 


HotPicks 


Haveged 

An easy-to-use, unpredictable 
random number generator, 
using the Haveged algorithm. 


Ack 


Ack is source code search tool 
written in Perl 5. It’s like grep, and 
optimised for programmers. 


Tk-yupana 
A simple program that emulates 
the ancient Incan abacus. 


VMS-empire 


Codemisc IPCop A simulation of a full-scale war 
Functional Shell Development A Linux firewall distribution between two emperors. 
Made fun. geared towards home and 

; SOHO users. Xnee 
Di Record, replay and distribute 
Get more detail disk information KeePass user actions under X11. 


than the df command in whatever 
format you prefer. 


An open source password 
manager for locking all your 
passwords in one database. 


LibreOffice 


A comprehensive, professional- 
quality productivity suite. a Sed tet 


Fuego 

A Go player and a collection of 
libraries for developing software 
for the game. 


, 









Tune in to the second instalment from the LXF team, 
who've been locked in a cupboard by maniac piano 
player who won't. Stop. Playing! ARRGGGHH! 

News Red Hat joins forces with CentOS, the brilliance of 
Ye Olde SteamOS, the less brilliant Steam Machines so 
far, why Steam VR is becoming scarily good, hacked mT 
fridges sending your spam and End of Life dates for ims Phas 
Ubuntu releases. zA 
Discoveries of the week Distros for the visually 2 fy 
impaired, NHS data sharing (which has been delayed) . Li fiagi \ 
— is it good or bad thing? BlackBlaze hard drive study, Whe ee” 
which has some surprising results. mn Ae 





www.tuxradar.com 





» Is there an equivalent of MS Office? 
» What’s this command line all about? 








And more! 


Are you reading 
this on a tablet? 


Download your DVD from 
www.linuxformat.com 
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Essentials 
Checkinstall Install tarballs with your 
package manager. 


GNU Core Utils The basic utilities that 
should exist on every operating system. 


Hardinfo A system benchmarking tool. 


Kernel The source code to the latest 
kernel release. 


Memtest86+ Check your RAM for 
faults or errors. 


Plop A simple boot manager to start 
operating systems. 


RaWrite Create bootable floppy disks 
in Windows. 


SBM An OS-independent boot manager 
with an easy-to-use interface. 


WvDial Connect to the internet with a 
dial-up modem. 


Bookshelf 

The Cathedral and the Bazaar Eric S 
Raymond's classic text explaining the 
advantages of open development. 


Intro to Linux A beginner's guide. 


Linux Kernel in a Nutshell An 
introduction to the kernel written by 
master-hacker Greg Kroah-Hartman. 


Debian Administrators’ Handbook An 
essential guide for sysadmins. 


Linux Dictionary The A-Z of everything 
to do with Linux. 


Dive Into Python A masterclass in this 
popular language. 


Bourne Shell Scripting Guide Get 
started with shell scripting. 
Advance Bash 
Scripting Guide With 
more for power users. 
System Administrator’s 
Guide The basics of 
running your system. 
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et a perfect 
- Linux desktop 


Make Linux work the way you want it to. We reveal how 
to set up, configuring and tweak the best desktop 
options to be perfect for your individual needs. 





How Free and Open Source Software Is helping 
children to learn, no matter what their background Is. 


Keep an eye on how your system is performing, and 
catch any problems before they become catastrophic. 


There's a new init daemon in town that will make Linux 
boot up faster than ever before. We check it out. 


Contents of future issues subject to change — we might have been put in detention. 
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We are committed to only using magazine paper which is 
derived from well-managed, certified forestry and chlorine-free 
manufacture. Future Publishing and its paper suppliers have 
been independently certified in accordance with the rules of the 
FSC (Forest Stewardship Council). 


Cy Mixed Sources 
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A sign of things to come! 


To get the new domain you really want pre-order with 123-reg 
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(3) poundhost 


A NAMESCO COMPANY 


Dedicated S$ 
CS5.5 








v No Contracts 

v 24/7 OnSite Support 
v Intel Xeon Processors 
v Dell PowerEdge C 

v 15TB Traffic 





per month 





Dada Figures and Stats: 490,000 8 OOO 6,000 1800,000 


Number of Customers Number of Dedicated Servers Number of Virtual Servers (VPS) Number of Domains 


www.poundhost.com 


A NAMESCO COMPANY 


tel: 0800 876 0942 ‘G) poundhost 





